What's new
Product announcements and security advisories, newest first.
- Security advisoryLiteSpeed 6.3.7 Build 8 — Critical HTTP/3 (LSQUIC) Fix: How to UpdateLiteSpeed 6.3.7 build 8 fixes a critical flaw in LSQUIC, its HTTP/3 engine. Check your build, update with one command, refresh the licence and verify.
- Security advisorycPanel & WHM Security Updates (August–October 2026): 7 CVEs + WP Toolkit — How to PatchSeven cPanel & WHM flaws and two WP Toolkit flaws (Aug–Oct 2026) can let an account holder run commands or raise privileges. Check, update, verify.
- Security advisoryZDI-CAN-33367 — Linux Kernel Local Root Flaw: Check, Mitigate & PatchA public exploit for kernel flaw ZDI-CAN-33367 lets any local user gain root. Check exposure, apply the one-line fix, then update the kernel or KernelCare.
- Security advisoryDirectAdmin: How to Patch PHP CVE-2026-109618 & CVE-2026-109619 (Critical RCE)Critical PHP RCE (CVE-2026-109618, CVE-2026-109619) on DirectAdmin: check your PHP versions, rebuild PHP with CustomBuild to a fixed release, and verify.
- Security advisoryPlesk: How to Patch PHP CVE-2026-109618 & CVE-2026-109619 (Critical RCE)Critical PHP RCE (CVE-2026-109618, CVE-2026-109619) on Plesk: check your PHP handlers, install the patched Plesk PHP builds with Plesk Installer, and verify.
- Security advisoryCVE-2026-109618 & CVE-2026-109619 — Critical PHP RCE: How to PatchTwo critical PHP remote-code-execution flaws (CVE-2026-109618, CVE-2026-109619) were disclosed on 21 Oct 2026. cPanel EA-PHP and CloudLinux ALT-PHP patched packages are out…
- AnnouncementTuxCare ELS + KernelCare Now Included With Your CloudLinux LicenseTuxCare Endless Lifecycle Support and KernelCare live kernel patching are now included with CloudLinux. Keep end-of-life PHP 7.4, Python 2.7 and your kernel patched with no reboot…
- Security advisoryServer Security Advisories — cPanel, CloudLinux, LiteSpeed & CSFCurrent security advisories for cPanel, CloudLinux, LiteSpeed and CSF — CVE-2026-54420, GhostLock CVE-2026-43499, OVSwrap CVE-2026-64531 and the CSF root-access fix. How to check…