High 2026-08-06

Security Advisory: cPanel Email Filters RCE

cPanel AlmaLinux 9 CentOS 7 CloudLinux 7 CloudLinux 9

A remote code execution vulnerability was discovered in the cPanel email filters interface. Attackers with a low-privilege account could execute commands as root.

Affected Versions

TUI 18.0.42 and earlier

Patched Version

TUI 18.0.48

Default Update CMD

yum update -y

Fix Commands

CentOS 7 / CloudLinux 7

yum clean all
/scripts/upcp --force

AlmaLinux 9 / CloudLinux 9

dnf clean metadata
/scripts/upcp --force

A remote code execution vulnerability was discovered in the cPanel email filters interface. Attackers with a low-privilege account could execute commands as root.

More Information

Security Advisories

Latest Advisories

Security Advisory: cPanel / CSF Plugin

2026-08-06

Security Advisory: CloudLinux $HTTP_HOST Environment Injection

2026-08-06

Security Advisory: LiteSpeed Web Server Heap Overflow

2026-08-06

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System