Back to Security Advisories

Security Advisory: DirectAdmin EXIM4 Configuration Injection

A crafted virtual domain name injects additional lines into the generated exim configuration, allowing an authenticated user to redirect mail flow for other accounts.

High
DirectAdmin AlmaLinux 8 AlmaLinux 9 CentOS 7 CloudLinux 8 CloudLinux 9 Debian 11 Debian 12 Ubuntu 20.04 Ubuntu 22.04

Affected Versions

DirectAdmin 1.678 and earlier

Patched Version

DirectAdmin 1.679

Default Update CMD

yum update -y

Fix Commands

AlmaLinux 9 / CloudLinux 9

cd /usr/local/directadmin
echo 'action=update&value=current' >> data/task.queue
directadmin --reload

AlmaLinux 8 / CloudLinux 8

cd /usr/local/directadmin
echo 'action=update&value=current' >> data/task.queue
directadmin --reload

CentOS 7 / CloudLinux 7

cd /usr/local/directadmin
echo 'action=update&value=current' >> data/task.queue
directadmin --reload

Ubuntu 22.04 / Debian 12

cd /usr/local/directadmin
echo 'action=update&value=current' >> data/task.queue
directadmin --reload

Ubuntu 20.04 / Debian 11

cd /usr/local/directadmin
echo 'action=update&value=current' >> data/task.queue
directadmin --reload

References

Security Advisories

Related Advisories

Security: Privilege Escalation via Phusion Passenger’s Watchdog API

2026-09-08

Security: CVE-2026-41940 – cPanel & WHM / WP2 Security Update 04/28/2026

2026-09-08

Security: CSF Security Release – September 3rd, 2026

2026-09-08

Check your system for vulnerabilities

Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.

Check Your System