H4Y Technologies: iWebFusion and iCloudFusion

10/21/2026

There is a CRITICAL PHP vulnerability that everyone is talking about today. Rest assured that we are patching, patching, patching!! We suggest you do the same. We are securing all shared and critical servers first. cPanel and managed customers should get pushed updates automatically but PLEASE post a ticket to have us doublecheck!

More info: https://www.php.net/archive/2026.php

Security exploits are keeping us on our toes. What will tomorrow bring?

PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

08/07/2026

ATTENTION: New Security Alert involving ConfigServer Firewall

🔒🛡

SituationMultiple vulnerabilities were found in the ConfigServer Firewall plugin. Affected Product Versions Product Affected Versions Patched Versions CSF 16.20-1 and earlier 16.30-1 ImpactE...

04/30/2026

What a month it has been!

🔐 SECURITY ALERT | Important Update for All H4Y Clients

We're reaching out to keep you informed about two critical vulnerabilities currently being actively exploited in the wild that affect cPanel/WHM and Linux-based servers — including CloudLinux.

⚠️ What's happening?

1️⃣ CVE-2026-41940 – cPanel/WHM Authentication Bypass (CVSS 9.8 – Critical)
A serious flaw in cPanel allows attackers to bypass login entirely and gain root-level access to a server — without a password. It affects all cPanel/WHM versions after v11.40 and has been actively exploited since at least February 2026. Ransomware attacks encrypting files with a ".sorry" extension have already been reported across thousands of servers globally.

2️⃣ CVE-2026-31431 – Linux Kernel "Copy Fail" Privilege Escalation
A 9-year-old flaw in the Linux kernel (affecting every major distro since 2017, including CloudLinux) allows someone already on a server to escalate their privileges to root. A working public exploit is available.

Additionally, cPanel pre-disclosed three NEW CVEs today (CVE-2026-29201, 29202, 29203) with patches releasing today, May 8.

---

✅ FOR MANAGED CLIENTS:
You're in good hands — our team is actively monitoring the situation and applying patches across internal servers. We are relying upon automated updates for managed servers but please contact us if you want us to give immediate special attention to your host.

---

🔧 FOR SELF-MANAGED CLIENTS — Action Required:
Please take the following steps as soon as possible:

▶ Patch cPanel/WHM immediately:
SSH into your server and run: /scripts/upcp
Confirm you're on the latest patched build by running: /usr/local/cpanel/cpanel -V

▶ Patch your Linux Kernel (fixes Copy Fail):
Run: yum update kernel (CloudLinux/AlmaLinux/CentOS)
or: apt update && apt upgrade (Debian/Ubuntu)
Then reboot your server to load the new kernel.

▶ For new cPanel CVEs (29201/29202/29203):
Run /scripts/upcp after 12:00 PM EST today (May 8) to pull the latest Technical Support Release.

▶ Check for signs of compromise:
Look for files renamed with a .sorry extension, unexpected cron jobs, new SSH keys, or unknown user accounts.

▶ Verify your backups are intact and offsite.

---

📩 Questions or need help? Open a support ticket or reach out to us directly — we're here for you.

Stay safe out there. 🛡️
— The H4Y Team