Tag: cPanel

Posted on

cPanel & WHM Security Update: CVE-2026-29201, 29202, and 29203 Patched

cPanel Logo

cPanel released a coordinated security update today, May 8, 2026, addressing three separate vulnerabilities in cPanel & WHM. We received advance notice of the patch yesterday evening, monitored for its release at noon EDT, and applied it across our fleet as soon as it became available.

This post summarizes what cPanel disclosed, when the patch actually landed, and what we did about it.

What cPanel Disclosed in Advance

On the evening of May 7, cPanel sent affected partners an early-warning email letting us know a security update was coming the following day at 12:00 PM EDT. The advance notice covered three CVEs being patched together: CVE-2026-29201, CVE-2026-29202, and CVE-2026-29203.

The notice specified the minimum patched build for every supported tier from 11.86 through 11.136, including the WP Squared (11.136 WP2) line. cPanel recommended performing a manual update via /scripts/upcp once the patch was made available, rather than waiting for the standard automatic update window.

Full technical details were embargoed until the patch itself was released.

Continue reading “cPanel & WHM Security Update: CVE-2026-29201, 29202, and 29203 Patched”
Posted on

MDDHosting ObjectCache – Memcached and Redis Manager Updated

MDDHosting ObjectCache Memcached and Redis Manager

We are thrilled to announce the latest updates to our Object Cache cPanel Plugin that will help you manage Memcached and Redis more efficiently. We made management of these services even more straightforward and user-friendly.

Here’s a quick rundown of the new features:

Status Indicator: The status of the plugin is now indicated with a colored circle – green for running, yellow for starting or stopping, and red for stopped. This change will help you quickly identify the status of the plugin at a glance, without the need to check logs or other indicators.

Refresh Status Button: We have updated the “Refresh Status” link to a blue button. This change makes it more apparent that this button refreshes the status of the plugin and enables you to check for updates quickly.

Enable/Disable Button: The Enable/Disable links have been converted to buttons that are green for Enable and red for Disable. This change makes it more intuitive to turn on or off the plugin, and it also makes it easier to identify the current status. We debated between green to start, or green to show it’s already running on the buttons – let us know your thoughts!

Improved Text Display: We have made the text boxes for the socket display in a monospace font and bold. This change makes it easier to read.

Live Start/Stop Timer: We added a live timer until the next start/stop process for Memcached and Redis. The timer provides real-time information on when the services will start or stop next. This is especially useful when you need to make sure that the services are up and running before you begin working.

These updates are now live and available for use. We believe that these improvements will help our users manage Memcached and Redis more efficiently, saving them time and effort. If you have any feedback or suggestions, we’d love to hear from you!

Posted on

cPanel AutoSSL – Automatic Free SSL for All Domains

AutoSSL PadlockAutoSSL is going to change how webmasters secure data transferred to and from their sites.  For the longest time SSL was an additional expense that many webmasters chose to forego as it wasn’t required for the operation of their websites.  The time when not having SSL is the norm for most sites is coming to an end.  Generally SSL has been reserved for usage by those that send or receive private information such as your name, address, email address, and phone number or even your credit card information.

Google and other search engines are already giving preferable ranking to sites with SSL.  For quite some time we’ve offered Let’s Encrypt to our customers so that everybody has access to freely accessible SSL for any site they wish.  cPanel has taken this a step further and created what they refer to as AutoSSL.  AutoSSL generates and installs a domain validated SSL certificate on all active domains on a server that are not already protected with SSL. Continue reading “cPanel AutoSSL – Automatic Free SSL for All Domains”

Posted on

Running WHMCS v6.3? Saving Product Details Bug & Resolution

whmcWe recently identified a bug in the latest versions of WHMCS including version 6.3.1.  The bug consists of unexpected behavior when modifying a client’s product details and using the “Enter” key to submit the changes when the product is a cPanel Account.  In previous versions of WHMCS you could change a field, such as the renewal price, and press “Enter” to submit the form.  Over the years we had become accustomed to changing client product settings in this manner as we found it was the most efficient way to do it.

Due to this bug when modifying the details of a client’s product you have to use the “Save” button at the bottom of the form or WHMCS attempts the new “cPanel Single Sign-On” to access the cPanel account of the product.  On the surface this may not sound like a huge deal but over the course of the day the productivity lost over such a simple issue can add up fast.  In some cases the changes entered into the product are lost and even worse the representative may not notice it happened!

As we have also identified a fix we could put in place prior to WHMCS resolving this internally – we wanted to make that available.  This fix applies to both the “blend” as well as the “v4” WHMCS Administration templates. Continue reading “Running WHMCS v6.3? Saving Product Details Bug & Resolution”