Security Advisories

Critical vulnerabilities (CVEs) affecting cPanel, CloudLinux, LiteSpeed, Plesk and the Linux kernel — each with clear, step-by-step instructions to patch your server. Newest first.

• Critical advisory·Oct 22, 2026

  CVE-2026-109618 & CVE-2026-109619 — Critical PHP RCE: How to Patch

  Two critical PHP remote-code-execution flaws (CVE-2026-109618, CVE-2026-109619) were disclosed on 21 Oct 2026. cPanel EA-PHP and CloudLinux ALT-PHP patched packages are out…

• Advisory·Aug 8, 2026

  Server Security Advisories — cPanel, CloudLinux, LiteSpeed & CSF

  Current security advisories for cPanel, CloudLinux, LiteSpeed and CSF — CVE-2026-54420, GhostLock CVE-2026-43499, OVSwrap CVE-2026-64531 and the CSF root-access fix. How to check…