Security Advisories Hub

Security Advisories

All Security Advisories

Browse every advisory by affected product, operating system, or severity. Select a category to filter and paginate through the results.

Filter by category

Products

cPanel 148 CloudLinux 32 DirectAdmin 27 WHMCS 22 Plesk 20 CSF 19 LiteSpeed 14 WordPress 12 Imunify360 7 Virtualizor 3 JetBackup 2 SolusVM 1 Node.js 1 Apache 1

Operating Systems

AlmaLinux 8 152 AlmaLinux 9 137 Ubuntu 22.04 104 Ubuntu 20.04 91 CloudLinux 8 36 CloudLinux 9 36 AlmaLinux 10 34 CentOS 7 29 CloudLinux 7 23 Debian 12 18 Debian 11 13

Severity

High 357 Critical 143 Medium 72 Low 6

Latest Advisories

578 advisories
Critical 2026-09-29

Security: CVE-2026-93697 Stored XSS in WHM’s Account Modification Interfaces – September 29, 2026

cPanel
Critical 2026-09-29

Security: CVE-2026-93029 Stored XSS in WHM’s Manage SSL Hosts Interface – September 29, 2026

cPanel
Critical 2026-09-23 00:00:00

cPanel CVE-2026-87899: Privilege Escalation

cPanel AlmaLinux 8 AlmaLinux 9
Critical 2026-09-23 00:00:00

WP Toolkit for cPanel CVE-2026-87900

cPanel AlmaLinux 8 AlmaLinux 9
Critical 2026-09-23 00:00:00

Plesk CVE-2026-68492

Plesk AlmaLinux 8 AlmaLinux 9
Critical 2026-09-23 00:00:00

Plesk CVE-2026-87898: OS Command Injection

Plesk AlmaLinux 8 AlmaLinux 9
High 2026-09-23

cPanel CVE-2026-68490: Information Disclosure

cPanel AlmaLinux 8 AlmaLinux 9
Critical 2026-09-22 00:00:00

Virtualizor CVE-2026-43641: OS Command Injection

Virtualizor AlmaLinux 8 AlmaLinux 9
High 2026-09-22 00:00:00

Virtualizor CVE-2026-43642: Remote Code Execution

Virtualizor AlmaLinux 8 AlmaLinux 9
High 2026-09-22 00:00:00

Virtualizor CVE-2026-43643: Missing Authorization

Virtualizor AlmaLinux 8 AlmaLinux 9
Critical 2026-09-22

WordPress 7.1.2 Release

WordPress
Medium 2026-09-19

LiteSpeed Cache for WordPress CVE-2026-76579: Cross-Site Scripting (XSS)

LiteSpeed WordPress