EasyApache 4 25.63 — cPanel & WHM Update
EasyApache 4 25.63 rolls out ea-nginx updates for cPanel & WHM servers. Headline: CVE-2026-9256 (nginx-poolslip), a critical remote code execution vulnerability affecting all nginx versions, fixed in ea-nginx 1.
Affected Versions
25.63
What this means under a SharedLicense license
These are shared-hosting stack components (ea-nginx); with a CVSS of 8.1 in the advisory's own data and CWE-122 classed flaws, unpatched servers stay exposed until WHM's EasyApache update is applied.
Hotfix security release We released updated packages for EasyApache 4. This release addresses CVE-2026-9256 (nginx-poolslip), a critical remote code execution vulnerability affecting all nginx versions, fixed in ea-nginx 1.31.1. Phusion Passenger was also updated to version 6.1.3. For a full list of changes, read th…
EasyApache 4 25.63
2026 May 22
Hotfix security release
We released updated packages for EasyApache 4. This release addresses CVE-2026-9256 (nginx-poolslip), a critical remote code execution vulnerability affecting all nginx versions, fixed in ea-nginx 1.31.1. Phusion Passenger was also updated to version 6.1.3.
For a full list of changes, read the EasyApache 4 change log.
Frequently Asked Questions
What does EasyApache 4 25.63 fix?
Which packages are involved?
How do I apply it?
References
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System