What's new
Product announcements and security advisories, newest first.
- Security advisoryDirectAdmin: How to Patch PHP CVE-2026-109618 & CVE-2026-109619 (Critical RCE)Critical PHP RCE (CVE-2026-109618, CVE-2026-109619) on DirectAdmin: check your PHP versions, rebuild PHP with CustomBuild to a fixed release, and verify.
- Security advisoryPlesk: How to Patch PHP CVE-2026-109618 & CVE-2026-109619 (Critical RCE)Critical PHP RCE (CVE-2026-109618, CVE-2026-109619) on Plesk: check your PHP handlers, install the patched Plesk PHP builds with Plesk Installer, and verify.
- Security advisoryCVE-2026-109618 & CVE-2026-109619 — Critical PHP RCE: How to PatchTwo critical PHP remote-code-execution flaws (CVE-2026-109618, CVE-2026-109619) were disclosed on 21 Oct 2026. cPanel EA-PHP and CloudLinux ALT-PHP patched packages are out…
- AnnouncementTuxCare ELS + KernelCare Now Included With Your CloudLinux LicenseTuxCare Endless Lifecycle Support and KernelCare live kernel patching are now included with CloudLinux. Keep end-of-life PHP 7.4, Python 2.7 and your kernel patched with no reboot…
- Security advisoryServer Security Advisories — cPanel, CloudLinux, LiteSpeed & CSFCurrent security advisories for cPanel, CloudLinux, LiteSpeed and CSF — CVE-2026-54420, GhostLock CVE-2026-43499, OVSwrap CVE-2026-64531 and the CSF root-access fix. How to check…