31
Nginx / NGINX has 6 more CVE's today
« Last post by Starburst on October 14, 2026, 06:18:31 PM »6 more CVE's just got reported today (2026-10-14) for security flaws in NGINX.
Please make sure you are running the latest release version, so your servers don't have security holes.
CVE's, as always can be viewed at:
https://sysadmin.help/viewforum.php?f=80
I try to keep relevant CVE's to software running with CWP servers posted.
Please make sure you are running the latest release version, so your servers don't have security holes.
CVE's, as always can be viewed at:
https://sysadmin.help/viewforum.php?f=80
I try to keep relevant CVE's to software running with CWP servers posted.
32
Backup / Re: Backup Manager Beta is not remembering password in destination
« Last post by clight77 on October 14, 2026, 02:42:57 PM »Ah, CWP 1.1.9 remembered my Backup FTP Destination today lets hope it continues. 

33
CWP API / Re: Change API port
« Last post by xenios on October 14, 2026, 06:48:27 AM »But port redirection will also work for potential hackers too
Editing /usr/local/cwpsrv/conf/cwpsrv.conf allows you to change the admin port, but I've never changed the API port.
You can use /etc/csf/csf.redirect to setup port redirection:Code: [Select]# DNAT (redirect from one IP address to a different one):
# IPx|*|IPy|*|tcp/udp - To IPx redirects to IPy
# IPx|portA|IPy|portB|tcp/udp - To IPx to portA redirects to IPy portB
#
# DNAT examples:
# 192.168.254.62|*|10.0.0.1|*|tcp
# 192.168.254.62|666|10.0.0.1|25|tcp
#
# REDIRECT (redirect from port to a different one):
# IPx|portA|*|portB|tcp/udp - To IPx to portA redirects to portB
# *|portA|*|portB|tcp/udp - To portA redirects to portB
#
# REDIRECT examples:
# 192.168.254.60|666|*|25|tcp
# *|666|*|25|tcp[code]
34
Updates / Re: CWP version 1.3 and 1.4 issues
« Last post by Starburst on October 14, 2026, 06:01:19 AM »The upgrade of CWP panel to version 1.3 and 1.4 has caused the following errors. Anyone else seeing this? Any fixes?
1. The firewall manager doesn't work get the error - The module firewallv2 does not exist.
2. Mod Security dash board just has a spinner and never show anything
3. No search bar on the SSL certificates dashboard
4. Yum manager also just showing a spinner for all tabs
System info:
CPU Model: Intel(R) Xeon(R) CPU @ 2.30GHz
CPU Details: 2 Core (2300 MHz)
Distro Name: CentOS Linux release 7.9.2009 (Core)
Kernel Version: 3.10.0-1160.59.1.el7.x86_64
Platform: x86_64 kvm
CentOS 7 is way past EOL, RH sent it to their archive, and other repos just dropped it all together at this point.
So links to build packages no longer exist.
yum updates stopped working, since there are no updates anymore.
You're running a server with security holes, that will never be patched.
You should upgrade to either AlmaLinux 8 or AlmaLinux 9.
If your not good with setting security permissions, then you might want to look at AL8, since it almost acts like what you're running.
AL9 has a different security scheme, so does AL10.
CWP 1.19 just came out this morning.
35
Updates / Re: CWP version 1.3 and 1.4 issues
« Last post by overseer on October 14, 2026, 01:12:24 AM »In CWP Settings > Edit Settings, do you have
Alternately:
Disable a shell script: you can put exit 0 just below the shebang line #!/bin/sh
for a PHP script: add exit(); to the script, below the opening <?php line:
Code: [Select]
CWP Updates: Stable (Stable version, at least two weeks tested)toggled on?Alternately:
Disable a shell script: you can put exit 0 just below the shebang line #!/bin/sh
for a PHP script: add exit(); to the script, below the opening <?php line:
Code: [Select]
<?php
// terminate the script immediately with a success code (0)
exit();36
Updates / Re: CWP version 1.3 and 1.4 issues
« Last post by vox on October 13, 2026, 10:34:36 PM »I'm getting leery of updating CWP.
What's the best way to disable auto update? I'd rather have the update sit and I can watch the forums for issues, because we ALL know there always something broken.
There's a new update pending right now.
ChatGPT recommends:
What's the best way to disable auto update? I'd rather have the update sit and I can watch the forums for issues, because we ALL know there always something broken.
There's a new update pending right now.
ChatGPT recommends:
Code: [Select]
To disable automatic updates in CWP (Control Web Panel) on your AlmaLinux 8 server, you can do it through SSH.
1. Disable CWP automatic updates
CWP typically uses a cron job to check for panel updates.
Log in as root and check:
cat /etc/cron.d/cwp
Look for an entry containing:
/usr/local/cwp/php71/bin/php /usr/local/cwpsrv/htdocs/resources/admin/include/cron.php
Or a command referencing update_cwp.
You can also search for update jobs:
grep -RiE 'update_cwp|cwp.*update' /etc/cron* /var/spool/cron/ 2>/dev/null
2. Disable only the update job
If you find a dedicated CWP update cron entry, comment out that line by adding # at the beginning.
Do not disable the entire CWP cron file, because it may contain important maintenance tasks.
3. Check for an automatic update setting
In some CWP versions, the update behavior can also be controlled through panel settings.
Log in to CWP as root:
https://your-server-ip:2031
Check CWP Settings for an automatic update option. The availability and location depend on your installed version.
4. Verify
Run:
grep -RiE 'update_cwp|cwp.*update' /etc/cron* /var/spool/cron/ 2>/dev/null
Confirm the dedicated update job is disabled.
37
CWP API / Re: Change API port
« Last post by Starburst on October 13, 2026, 08:15:21 PM »Don't forget to chattr +i the file so a future update doesn't overwrite it.
38
CWP API / Re: Change API port
« Last post by overseer on October 13, 2026, 02:25:36 PM »Editing /usr/local/cwpsrv/conf/cwpsrv.conf allows you to change the admin port, but I've never changed the API port.
You can use /etc/csf/csf.redirect to setup port redirection:
You can use /etc/csf/csf.redirect to setup port redirection:
Code: [Select]
# DNAT (redirect from one IP address to a different one):
# IPx|*|IPy|*|tcp/udp - To IPx redirects to IPy
# IPx|portA|IPy|portB|tcp/udp - To IPx to portA redirects to IPy portB
#
# DNAT examples:
# 192.168.254.62|*|10.0.0.1|*|tcp
# 192.168.254.62|666|10.0.0.1|25|tcp
#
# REDIRECT (redirect from port to a different one):
# IPx|portA|*|portB|tcp/udp - To IPx to portA redirects to portB
# *|portA|*|portB|tcp/udp - To portA redirects to portB
#
# REDIRECT examples:
# 192.168.254.60|666|*|25|tcp
# *|666|*|25|tcp[code]39
CWP API / Change API port
« Last post by xenios on October 13, 2026, 12:24:45 PM »Hello,
is it possible to change API port, since default port is used to hack server?
is it possible to change API port, since default port is used to hack server?
40
Aplications / Re: Abnormal fevicon and title in google results
« Last post by overseer on October 13, 2026, 11:48:21 AM »Didn't see any PM. Please resend and I will look at it for you.
Recent Posts