EasyApache 4 25.71 — cPanel & WHM Update
EasyApache 4 25.71 is cPanel & WHM's packaging of ea-modsec30 security fixes: ed ea-modsec30 and ea-modsec30-rules-owasp-crs packages for EasyApache 4. This security hotfix updates ea-modsec30 to 3.0.16, addressing two issues: CVE-2026-52747 (the multipart/form-data request body parser invalidly h
Затронутые версии
25.71
Что это значит по лицензии SharedLicense
These are shared-hosting stack components (ea-modsec30); with a CVSS of 8.6 in the advisory's own data and CWE-180 classed flaws, unpatched servers stay exposed until WHM's EasyApache update is applied.
Security hotfix We released updated ea-modsec30 and ea-modsec30-rules-owasp-crs packages for EasyApache 4. This security hotfix updates ea-modsec30 to 3.0.16, addressing two issues: CVE-2026-52747 (the multipart/form-data request body parser invalidly handled r and characters, allowing an unauthenticated WAF rule b…
EasyApache 4 25.71
2026 July 13
Security hotfix
We released updated ea-modsec30 and ea-modsec30-rules-owasp-crs packages for EasyApache 4.
This security hotfix updates ea-modsec30 to 3.0.16, addressing two issues: CVE-2026-52747 (the multipart/form-data request body parser invalidly handled r and n characters, allowing an unauthenticated WAF rule bypass) and CVE-2026-52761 (wrong behavior in utf8toUnicode on i386 architecture).
For a full list of changes, read the EasyApache 4 change log.
Часто задаваемые вопросы
What does EasyApache 4 25.71 fix?
Which packages are involved?
How do I apply it?
Проверьте систему на уязвимости
Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.
Проверьте свою систему