CLN Login
CVE-2026-98432 Linux kernel IPv4 TCP flaw: status for CloudLinux
CVE-2026-98432 is a use-after-free flaw in the Linux kernel's IPv4 TCP code that a remote attacker can reach...
Read More
CloudLinux ELevate: in-place upgrades from CloudLinux 8 to 9 now include Plesk
If you run Plesk on CloudLinux 8, you can now upgrade the server to CloudLinux 9 in place,...
Read More
Three KEV-listed Linux kernel CVEs (CVE-2025-39964, CVE-2026-53266, CVE-2025-39682): status and fixes for CloudLinux
On September 18, 2026, CISA added three unrelated Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalogue: a...
Read More
BTR (CVE-2026-64507, CVE-2026-64508) Spectre v2 kernel memory leak: status for CloudLinux
BTR (CVE-2026-64507, CVE-2026-64508) is a Spectre v2 variant that lets a local unprivileged user read kernel memory. It...
Read More
Shared node_modules Store for Node.js Selector now in beta: one copy of each package version per server
Node.js Selector can now keep one copy of each npm package version on a server and share it...
Read More
Per-Site Resource Limits Now Available in Beta: Phase 3 of CloudLinux Isolates
Each isolated website on a CloudLinux server can now have its own CPU, memory, I/O and process limits....
Read More
bridge-stp-uaf (CVE-2026-72389) local root vulnerability: kernel update and mitigation for CloudLinux
📋 TL;DR — last updated October 29, 2026, 14:48 UTC bridge-stp-uaf (CVE-2026-72389, CVSS 7.0, Moderate per Red Hat)...
Read More
CloudLinux Package Signing Key: Switch Date for CloudLinux 7, 8, and 9
Starting December 1, 2026, CloudLinux signs all new packages for CloudLinux 7, 8, and 9 with the new...
Read More
SCTPhantom (CVE-2026-64564) Local Root Exploit: Status and Fixes for CloudLinux
SCTPhantom (CVE-2026-64564) is a vulnerability in the Linux kernel's SCTP code that lets a local unprivileged user become...
Read More
AccelerateWP security advisory: wp-config.php.backup exposure fixed in December 2025, most installations already updated
Security advisory about a fixed vulnerability in AccelerateWP's Object Cache feature. Fixed in 1.9-38 in December 2025; affected...
Read More