Security Advisory: cPanel cpsrvd SSL Downgrade Vulnerability
A TLS downgrade weakness in cPanel's cpsrvd daemon is fixed in this security release: connections to WHM and cPanel could be negotiated down to weaker protection, exposing login sessions to interception on hostile networks. Update cPanel & WHM with upcp and keep TLS settings modern.
Затронутые версии
cPanel & WHM 120.0.8 and earlier
Исправленная версия
cPanel & WHM 120.0.12
Команда обновления по умолчанию
yum update -yКоманды исправления
AlmaLinux 9 / CloudLinux 9
dnf clean metadata
/scripts/upcp --forceAlmaLinux 8 / CloudLinux 8
dnf clean metadata
/scripts/upcp --forceCentOS 7 / CloudLinux 7
yum clean all
/scripts/upcp --forceЧто это значит по лицензии SharedLicense
Your SharedLicense license itself is not affected — this is a change in cPanel & WHM software, not in licensing. Apply it on every affected server: sudo /scripts/upcp --force. Licenses keep working through updates; nothing needs re-issuing or re-activating.
What happened
cpsrvd serves the WHM and cPanel interfaces over TLS. The flaw allowed a connection downgrade: an attacker positioned between the administrator and the server could influence the negotiation toward weaker TLS, weakening the protection around credentials and session cookies that cross that link.
Who is affected
Every cPanel & WHM server, since cpsrvd fronts the management UIs. The risk concentrates on administrative logins from networks the operator does not control.
How to apply the fix
- Update the panel:
sudo /scripts/upcp --force - Review the TLS configuration in WHM and require modern protocol versions.
- Have administrators with old sessions log out and back in after the update.
For SharedLicense customers
Licensing is unaffected — this is a cPanel & WHM software fix delivered through the standard update channel.
Часто задаваемые вопросы
What is the cpsrvd TLS downgrade?
What should administrators do besides updating?
Does this affect hosted websites?
Источники
Проверьте систему на уязвимости
Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.
Проверьте свою систему