What Hosting Administrators Need to Know A Linux server can run websites smoothly and still have a serious flaw in its operating system. That’s why hosting providers need to pay attention to kernel vulnerabilities, even when their applications and customer accounts appear to work normally. One recent example is ZDI-CAN-33367, a Linux kernel vulnerability that allows a local, unprivileged user to change file contents stored in memory under specific conditions. The affected file may belong to another user or even root, although the attacker normally can read it but not modify it. The vulnerability can create a serious problem for hosting providers that run multiple customer accounts on the same server. If an attacker gains local access, they may use …
Server
Picture an apartment building. The building is your server. Each apartment is a virtual machine (VM) that you rent to a customer. Most tenants are lovely. A few are curious. And once in a while, one of them finds a way to walk through the wall into the building’s control room. That is the kind of problem CVE-2026-99999 creates. Researchers call it PwnEscape. It is a flaw in the Linux kernel, in the part that handles virtio-net and TAP networking. AWS published a bulletin about it (2026-137-AWS) on October 15, 2026, and advice from different vendors keeps changing as new details emerge. This checklist is for VPS providers, data centers, and businesses that run their own KVM hosts. By the …
PHP CVE-2026-109618 and CVE-2026-109619: What Hosting Teams Should Do Now?
PHP CVE-2026-109618 and CVE-2026-109619 are critical remote code execution vulnerabilities disclosed on October 21, 2026. Both vulnerabilities could allow attackers to execute code on affected PHP servers without authentication. PHP has released patched versions, so hosting providers should identify vulnerable installations and apply the appropriate updates promptly. Updating WordPress, plugins, and themes alone does not protect a website from vulnerabilities in the underlying PHP runtime. If a server still runs a vulnerable PHP version, the website may remain at risk even when its applications are fully updated. For web hosting companies, fixing these vulnerabilities requires more than updating a single server. One server may run multiple PHP versions, several PHP-FPM pools, and hundreds of customer websites. Hosting environments may also …
Server migration is a significant undertaking for businesses undergoing performance enhancements, reinforcing security, promoting scalability, and upgrading technology systems. However, moving your data, applications, files and configuration details from one server to another can create risks if the process is not adequately planned. A poorly managed server migration can affect your business operations by resulting in unexpected downtime, loss of data, and application errors. Businesses that heavily rely on websites, applications, databases, and other business-critical systems face disruption, revenue loss and a negative impact on customer confidence, even in brief periods of unavailability. A well-structured server migration plan helps reduce risks and makes migration processes more manageable. Careful planning and meticulous attention to every step, starting with assessment of your …
Servers form the foundation of many modern businesses and support websites, applications, databases, email systems, cloud services, and other essential operations. The effects of a server suffering from performance problems, security threats, or unexpected downtime can be felt very quickly outside of the IT department. It is possible to end up with expensive downtime, data loss, security incidents, and emergency repair bills if one waits for a server problem to happen before taking action. Instead, proactive server management works by constantly monitoring, maintaining, securing, and optimizing the servers so that minor issues do not develop into major ones. If a business takes advantage of good server management services, it will be able to improve server performance, cut down on downtime, …
CVE-2026-65643: cPanel Domain Parking Vulnerability and Security Patch Guide
A newly disclosed cPanel security vulnerability deserves immediate attention from anyone operating a cPanel-based hosting environment.CVE-2026-65643 affects cPanel & WHM’s domain parking functionality. According to cPanel’s August 27, 2026 security advisory, an authenticated cPanel account holder who is permitted to add parked or addon domains can create arbitrary files on the server. Successful exploitation can ultimately result in code execution as the root user, potentially giving an attacker control over the server and the accounts, websites, and databases running on it.
GhostLock (CVE-2026-43499): How to Protect Your Linux Servers from the Latest Kernel Vulnerability
Cybersecurity threats targeting Linux servers continue to evolve, and GhostLock (CVE-2026-43499) is one of the most significant Linux kernel vulnerabilities administrators should address immediately. This vulnerability affects the Linux kernel and allows a local attacker with standard user privileges to escalate access to the kernel. In containerised environments, the impact is even greater, as attackers may be able to escape container isolation and gain control of the underlying host operating system. Organisations running web hosting servers, VPS, cloud infrastructure, dedicated servers, Kubernetes clusters, Docker containers, or shared hosting platforms should prioritise patching this vulnerability to reduce the risk of compromise. At SupportPRO, we strongly recommend updating vulnerable Linux systems as soon as vendor security patches become available.
A newly disclosed database privilege escalation vulnerability (CVE-2026-58048) affecting cPanel & WHM could expose hosting environments to unauthorized database access if left unpatched. Since databases power websites, applications, and customer data, protecting them should be a top priority for every server administrator. In this guide, we’ll explain who is affected, the potential risks, and the essential steps you should take to secure your cPanel servers.
Security issues that target hosting control panels can cause problems because these panels often manage many websites, email services and user accounts from one place. A recent issue is CVE-2026-58047 a problem that affects cpsrvd the web service that handles requests to cPanel and WHM interfaces. The problem is part of a group called HTTP Request Smuggling. This does not mean a server is definitely broken. It gives attackers a way to change how web requests are seen by different parts of the system. If the issue remains unresolved, this vulnerability could expose hosting setups to potential risks.
Email infrastructure is a critical part of modern IT environments, supporting everything from customer communication and password resets to automated system notifications. Exim, one of the most widely used Mail Transfer Agents (MTAs), powers email delivery for countless Linux servers and hosting platforms. Because of its widespread adoption, security vulnerabilities affecting Exim deserve immediate attention from system administrators. One such issue is GCVE-25-2026-07-45-3, a recently disclosed vulnerability involving Exim’s handling of .forward files under specific configurations. Unlike vulnerabilities that can be exploited remotely, this issue is classified as a local privilege escalation, meaning an attacker must already have access to a local user account before attempting exploitation. While this limits the attack surface, affected systems should still be patched promptly …