Tag: cpanel

Roundcube 1.6.20 and 1.7.5 fix 20 security flaws, the largest of five security rounds since 1.7.0. cPanel and Plesk ship the 1.6 branch.

nginx 1.30.6 and 1.31.7 fix five vulnerabilities that depend on how nginx is configured, in the eighth round of nginx security fixes this year.

Plesk, WHMCS and cPanel all cost more in 2027, by up to 20 percent. cPanel moves first, on December 16, 2026.

WebPros has emailed partners that cPanel prices rise in 2027, figures to follow. The licence has doubled since 2019 and is now the smaller part of the bill.

cPanel AI is generally available. The interface and assistant come with the license, while the Nova builder is partner-only and sold by the credit.

An authenticated cPanel account holder could run code as root through CalDAV and CardDAV. Three builds carry the fix, dated September 22.

LiteSpeed Enterprise 6.3.7 shipped three security builds in six days, after a cPanel advisory on a root path from a hosting account. Build 2 is the one to run.

Acronis patched a privilege-escalation flaw in its cPanel backup plugin and reports limited attacks. CISA listed it with a September 19 deadline.

cPanel has patched CVE-2026-67401, a flaw rated 9.9 out of 10 that let an authenticated account with mail privileges run code as root.

A cPanel customer able to add parked domains could gain root on the whole server. CVE-2026-65643 affects all supported versions; patches are out.