Aggiornamenti di sicurezza sanano 2 vulnerabilità con gravità “alta” nel prodotto cPanel & WHM, nota piattaforma per la gestione di server e hosting. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di leggere gli eventi in calendario e la rubrica di account arbitrari senza autenticazione, o di scrivere file arbitrari sui sistemi interessati con privilegi elevati.
Aggiornamenti di sicurezza sanano 3 vulnerabilità con gravità “critica” presenti nei prodotti cPanel/WHM (Web Host Manager). Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di eseguire codice arbitrario con privilegi amministrativi sui sistemi interessati.
Serial number: AV26-961Date: September 24, 2026 As of September 23, 2026, WebPros is affected by vulnerabilities in the following products: Plesk Versions 18.0.34 to 18.0.80.7 Version 18.0.81.0 Plesk extension "Plesk RESTful API" Versions 2.4.2 to 2.4.6 Plesk extension "Site Import" Prior to or equal to 1.12.1 WP Toolkit for cPanel Prior to or equal to 6.11.2-10794 cPanel/WHM Prior to 11.134.0.57 Prior to 11.136.0.41 Prior to 11.138.0.8 The Cyber Centre encourages users and administrators to…
Classification: Severe, Solution: Official Fix, Exploit Maturity: High, CVSSv3.0: 7.8, CVEs: CVE-2026-87886, Summary: Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin for cPanel & WHM deployments. Affected products Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021 Acronis Backup extension for Plesk (Linux) before build 1.8.11.638
Serial Number: AV26-861Date: August 28, 2026 As of August 27, 2026, WebPros is affected by vulnerabilities in the following products: cPanel & WebHost Manager (WHM) software Prior to 11.110.0.141 Prior to 11.134.0.53 Prior to 11.136.0.37 Prior to 11.138.0.2 Prior to WP2: 11.138.1.7 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available Security: CVE-2026-65643 Vulnerability in cPanel’s Domain Parking…