Back to Security Advisories

EasyApache 4 25.54 — cPanel & WHM Update

EasyApache 4 25.54 rolls out ea-n, ea-openssl11, ea-php84, ea-php85 updates for cPanel & WHM servers. Headline: We released updated packages for EasyApache 4. This security and maintenance release includes a security patch for ea-openssl11 (CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390), version updates for ea-php

High 8.1 CVSS
cPanel

Affected Versions

25.54

What this means under a SharedLicense license

These are shared-hosting stack components (ea-n, ea-openssl11, ea-php84, ea-php85); with a CVSS of 8.1 in the advisory's own data and CWE-416 classed flaws, unpatched servers stay exposed until WHM's EasyApache update is applied.

Security and maintenance updates We released updated packages for EasyApache 4. This security and maintenance release includes a security patch for ea-openssl11 (CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390), version updates for ea-php84 (8.4.19 to 8.4.20) and ea-php85 (8.5.4 to 8.5.5), and an ea-n…

EasyApache 4 25.54

2026 April 15

Security and maintenance updates

We released updated packages for EasyApache 4.

This security and maintenance release includes a security patch for ea-openssl11 (CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390), version updates for ea-php84 (8.4.19 to 8.4.20) and ea-php85 (8.5.4 to 8.5.5), and an ea-nginx update to v1.29.8 with associated module rebuilds.

For a full list of changes, read the EasyApache 4 change log.

Frequently Asked Questions

What does EasyApache 4 25.54 fix?
We released updated packages for EasyApache 4. This security and maintenance release includes a security patch for ea-openssl11 (CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390), version updates for ea-php
Which packages are involved?
ea-n, ea-openssl11, ea-php84, ea-php85 — the EasyApache 4 packaged builds of these components on cPanel & WHM servers.
How do I apply it?
In WHM, open EasyApache 4 and update the profile (or run the package update on the server); Apache/PHP restarts as part of it.

References

Security Advisories

Related Advisories

ConfigServer Security & Firewall (CSF) 16.35-1 — cPanel & WHM Update

2026-11-09

ConfigServer Security & Firewall (CSF) 16.34-1 — cPanel & WHM Update

2026-11-02

PHP Security Release – CVE-2026-115560

2026-10-24

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System