Tag: shared hosting

An authenticated cPanel account holder could run code as root through CalDAV and CardDAV. Three builds carry the fix, dated September 22.

nginx 1.31.5 adds a REST interface that reads the running config and grades every reload. Whether a server has it is settled at build time.

WordPress 7.1.1 was planned as bug-fix only and shipped with 11 security fixes, one an anonymous comment XSS the sanitizer does not catch.

LiteSpeed Enterprise 6.3.7 shipped three security builds in six days, after a cPanel advisory on a root path from a hosting account. Build 2 is the one to run.

A cPanel customer able to add parked domains could gain root on the whole server. CVE-2026-65643 affects all supported versions; patches are out.

Technical issues hit 78 Namecheap shared servers on August 26, the second outage in 13 days. Resolved in the evening, with no cause given.

InMotion is deploying Monarx ThreatShield across its server fleet, moving attack blocking into the PHP engine itself.

Plesk has patched three flaws reachable from an ordinary customer account. The worst can end at root, and its fix ships outside the core update.

GoDaddy added Node.js hosting to its Web Hosting plans, and published a deploy contract stating what an app must do to run.

Forminator's 9.8 file upload flaw was patched seventeen days before it went public, and the changelog shows eleven more fixes around it.