‼️ CVE-2026-54420: LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026. CVSS: 8.5 nvd.nist.gov/vuln/detail/CVE…

🚨High - LiteSpeed cPanel Plugin Symlink Mishandling / CageFS Bypass (CVE-2026-54420) A symlink-following flaw (CWE-61) in the LiteSpeed cPanel plugin lets an attacker who already holds FTP or web shell access to a user account on a shared hosting server plant crafted symbolic links that the plugin fails to validate before following. On servers using CloudLinux/CageFS for tenant isolation, this lets the attacker break out of their confined environment and read or modify files belonging to other accounts or the wider system - a scope-changing compromise with high confidentiality and integrity impact. Reported exploited in the wild since May 2026. 👉Upgrade to LiteSpeed cPanel plugin 2.4.8 / WHM PlugIn 5.3.2.0.

CVE-2026-54420 LiteSpeed cPanel Plugin Symlink Mishandling in CloudLinux/CageFS Environments vulmon.com/vulnerabilitydeta…

The tell: ask this before you sign anything. "Do you run CloudLinux CageFS on every cPanel account?" If the answer isn't an immediate yes, your clients' files are one PHP exploit away from being accessible to every other account on the same server.

Aynı hosting vaatlerinden sıkıldık. - Güçlü altyapı - Ücretsiz cPanel, Plesk, CloudLinux ve LiteSpeed - Web9 Sanal Sunucu 🎟️ HOSGELDIN20 ile avantajlı başla.

What to look for: dedicated IP included as standard (not a paid add-on), per-account PHP worker isolation (CloudLinux LVE), and an external uptime monitor you control — not just the host's own dashboard.

Certains de nos clients nous ont signalé une faille linux (CVE-2026-23111). Notre système d'exploitation CloudLinux a corrigée cette faille le 31/05/2026. Aucune action requise de votre part next.ink/brief-article/encor…

@HostPress_DE gives every customer the full security performance stack — no exceptions. Automatic attack blocking, fewer tickets. Imunify360, CloudLinux OS Shared Pro PHP X-Ray on every server. Full story: hubs.ly/Q04ksccJ0 VPS bundle: hubs.ly/Q04ks6dg0

@HostPress_DE gives every customer the full security performance stack — no exceptions. Automatic attack blocking, fewer tickets. Imunify360, CloudLinux OS Shared Pro PHP X-Ray on every server. Full story: hubs.ly/Q04ksdSF0 VPS bundle: hubs.ly/Q04kshpD0

5/ WHM resource limits per account. CloudLinux enforces CPU, RAM, and I/O ceilings per cPanel account at the kernel level. One client running 400 database queries per page load cannot slow down your other clients. Soft advisory caps don't cut it.

1/ CloudLinux CageFS — the first question to ask. Without it, one PHP exploit traverses the filesystem and reads every client's wp-config.php — database credentials for all your clients, exposed by one plugin. CageFS contains it at the kernel level.

New joint research from CloudLinux and WebPros: The State of WordPress Agencies in 2026. How agencies host, secure, optimize, and grow their businesses, based on a survey of WordPress agencies and freelancers. Live on June 17, 10am ET. Register: tinyurl.com/mwhu2unr

WordCamp #WCEU 2026 is done - unfortunately I couldn’t make it myself this year, but our team participated in multiple roles (volunteers, speakers, and attendees), and I’m looking forward to hearing their first-hand impressions. Reading the various recaps and looking at the photos in the meantime, I almost feel like I was there. My recap on the recaps (and please correct me if you feel I’m wrong): - WCEU isn’t going anywhere - the community is strong as ever, and everyone praised the venue and atmosphere - Talks made clear the community is well aware of WordPress’s challenges, both technical and distribution-related, and is actively working on them - Big names sponsored and had booths (PayPal, Google, Salesforce, Pantheon, CloudLinux, BlackWall) - good to see major players backing the platform - Content marketing and SEO channels have declined for many - Side events are growing, in both number and scale - AI is already embedded into most (or all) WP products, services, and workflows, and as of WordPress 7.0, in the core itself, yet most agree it still hasn’t fully settled - we’re still early - Several recaps discussed the slight dip in WordPress market share over the last 6-9 months, attributed mostly to: smaller sites relying on AI/vibe-coding instead of WP, a broader shift in the online economy (a website isn’t the must-have it once was), and the growth of other platforms (most didn’t get even 0.5% of the global share over the period but the number of options has grown) Greetings to all the friends I couldn’t see this time - hope to meet in Malaga next year! And a huge thank you to the organizing team for keeping WCEU going strong, and to our team for representing Melograno Venture Studio 🙏🏻 PS: Had to use my WCEU 2024 picture as it’s the last EU one I could make it

InterServer Partners with CloudLinux to Incorporate Imunify360 into Web Hosting interserver.net/blog/interse…

New joint research from CloudLinux and WebPros: The State of WordPress Agencies in 2026. How agencies host, secure, optimize, and grow their businesses, based on a survey of WordPress agencies and freelancers. June 17, 10am ET. Register: tinyurl.com/mwhu2unr

We're going to #WCEU 🇵🇱 Catch the CloudLinux team at WordCamp Europe, 5–6 June in Kraków. Speed and security for WordPress — malware detection WAF via a simple API. Book a meeting → sales@cloudlinux.com

We'd like to thank Ollyo - kirki and CloudLinux for being Author level sponsors for WordCamp Europe 2026! #WCEU #WCEU26

💼 Kernel Developer at CloudLinux / KernelCare 📍 Remote (Mexico, Brazil, Argentina / World Wide) 💰 Competitive Apply: skillcareerhub.com/jobs/a7e6… #Jobs #Hiring #JobSearch

Cloudlinux is now hiring a Remote Senior Database Reliability Engineer #remotework #remotejobs #wfh 👇 remoteok.com/jobs/remote-sen…