EasyApache 4 25.63 — cPanel & WHM Update

EasyApache 4 25.63 rolls out ea-nginx updates for cPanel & WHM servers. Headline: CVE-2026-9256 (nginx-poolslip), a critical remote code execution vulnerability affecting all nginx versions, fixed in ea-nginx 1.

Critical 8.1 CVSS 2026-08-07

cPanel

Betroffene Versionen

25.63

Was das unter einer SharedLicense-Lizenz bedeutet

These are shared-hosting stack components (ea-nginx); with a CVSS of 8.1 in the advisory's own data and CWE-122 classed flaws, unpatched servers stay exposed until WHM's EasyApache update is applied.

Hotfix security release We released updated packages for EasyApache 4. This release addresses CVE-2026-9256 (nginx-poolslip), a critical remote code execution vulnerability affecting all nginx versions, fixed in ea-nginx 1.31.1. Phusion Passenger was also updated to version 6.1.3. For a full list of changes, read th…

EasyApache 4 25.63

2026 May 22

Hotfix security release

We released updated packages for EasyApache 4. This release addresses CVE-2026-9256 (nginx-poolslip), a critical remote code execution vulnerability affecting all nginx versions, fixed in ea-nginx 1.31.1. Phusion Passenger was also updated to version 6.1.3.

For a full list of changes, read the EasyApache 4 change log.

Häufig gestellte Fragen

What does EasyApache 4 25.63 fix?

CVE-2026-9256 (nginx-poolslip), a critical remote code execution vulnerability affecting all nginx versions, fixed in ea-nginx 1.

Which packages are involved?

ea-nginx — the EasyApache 4 packaged builds of these components on cPanel & WHM servers.

How do I apply it?

In WHM, open EasyApache 4 and update the profile (or run the package update on the server); Apache/PHP restarts as part of it.

Referenzen

Sicherheitshinweise

System auf Schwachstellen prüfen

Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.

System prüfen

EasyApache 4 25.63

Hotfix security release

Häufig gestellte Fragen

Verwandte Warnhinweise

System auf Schwachstellen prüfen