The latest cPanel & WHM security patch has now been applied across our managed customer environments and shared hosting estate. This update applies to affected cPanel & WHM versions 120 and later and addresses a number of security vulnerabilities, including issues rated up to Critical severity. The vulnerabilities were either responsibly disclosed by external researchers… Keep Reading
We are aware of an actively exploited Magento Open Source and Adobe Commerce vulnerability known as StyleSmuggler. This issue may allow unauthenticated attackers to execute code on affected Magento stores, and security researchers have reported that current Magento versions, including recently patched installations, may be affected. If you manage a Magento store, we strongly recommend… Keep Reading
A recently disclosed security vulnerability in the Plesk XML API has been identified as CVE-2026-48614. The issue affects older versions of Plesk and could allow local privilege escalation, meaning someone with limited access to a server may be able to gain higher-level permissions if the system has not been updated. What is the vulnerability? CVE-2026-48614… Keep Reading
On 28 April 2026, cPanel released an urgent security update for all currently supported versions of cPanel & WHM, addressing a vulnerability related to authentication pathways within the control panel software. What was the issue? cPanel identified a security issue affecting all supported versions of cPanel & WHM, specifically linked to certain authentication paths within the software. Due to… Keep Reading
Over the past few days, the cPanel community has been made aware of an issue affecting servers running MySQL 8.4, where systems were unexpectedly upgraded to MySQL 9.7 during routine nightly updates. This behaviour was not initiated by server administrators and has caused service disruption on some platforms. At Hosting UK, we believe in keeping… Keep Reading