Security alerts
What to fix right now.
Short alerts when a serious flaw hits sites like yours: what happened, who is affected, how to check your site and what to do. The important ones from the past year are here too, in case you missed them. Every alert cites its official sources.
Security alerts
May 2026
LiteSpeed cPanel plugin flaws gave hosting accounts root access: ask your host
Two exploited flaws in LiteSpeed's cPanel plugin let a hosting account take over the whole server. Check that your host updated in mid 2026.
Exim mail server flaw allowed remote code execution without login: update Exim
A critical Exim flaw could let anyone who connects to the mail server run code on it. Fixed in May 2026, followed by more Exim fixes.
April 2026
cPanel and WHM login bypass used in ransomware attacks: confirm your server is patched
A critical cPanel & WHM flaw let attackers into control panels without a password. It was mass exploited. Check that your host patched.