Recent Posts
31
Backup / Re: Backup Manager Beta is not remembering password in destination
« Last post by xenios on October 17, 2026, 01:50:37 PM »1.19 Connection test to FTP successful, backup not working. Not even manually.
32
CentOS-WebPanel Bugs / Re: NodeJS Manager show apps in stopped state even they're running
« Last post by 6Sense on October 17, 2026, 01:42:53 PM »Thanks CWP dev team for fixing the node,js module 
My node.js module lights & start/stop button now work. If i run npm audit in the command line tool though it still says 'Command completed!' instantly with no output. Still to shy to click the NPM Istall button.
My node.js module lights & start/stop button now work. If i run npm audit in the command line tool though it still says 'Command completed!' instantly with no output. Still to shy to click the NPM Istall button.
33
Aplications / Re: Abnormal fevicon and title in google results
« Last post by anandmys on October 17, 2026, 12:44:40 PM »https://github.com/sminozzi/casino-seo-poisoning-guide suggested steps have cleared the googlebot issue
Not sure if malware is removed completely now
Not sure if malware is removed completely now
34
Information / Re: New security issue? 09.09.2026
« Last post by anandmys on October 17, 2026, 12:20:39 PM »35
Backup / Re: NEW Backup (beta) / Restore Account -> Does not list accounts to restore
« Last post by DA_MAN on October 17, 2026, 07:31:09 AM »Great work! (Sarcasm...) As of version 1.19 through version 1.20 not only did you not fix the restore issue for S3 backups, you broke the S3 backup mechanism, now CWP can't even backup to S3 storage. You've done something in the ioncube files that screws up the secret key making it a 6 byte string when the real entered secret string is 26 bytes. WHY??? Not only can you not FIX New Backup (beta) you have broken it even further! Look at whatever changes you made to your super secret ioncube files between v1.18 and 1.19 and reverse them as you have a serious regression issue going on.
It's one thing to not fix the restore functionality, but an entirely different thing to mess around and break the only thing that worked - S3 backups. This is ridiculous.
It's one thing to not fix the restore functionality, but an entirely different thing to mess around and break the only thing that worked - S3 backups. This is ridiculous.
36
Backup / Re: Backup Manager Beta is not remembering password in destination
« Last post by adrianofnatal on October 15, 2026, 09:40:42 PM »S3 backup still does not work.
37
Backup / Re: Backup Manager Beta is not remembering password in destination
« Last post by clight77 on October 15, 2026, 05:37:34 PM »1.19 just ran a back up to a nas via ftp it seems to be working so far.
Yep, that's 2 days in a row for me that BU has worked and password has held
38
CentOS-WebPanel Bugs / Re: CWP Cronjob Killing Server
« Last post by overseer on October 15, 2026, 02:35:56 PM »The advice (above) to update MariaDB was more than just whimsey. It is essential to get your server to a stable, supported place and it will make CWP more reliable. MariaDB 10.5 or 10.6 that comes installed with CWP is woefully out of date and full of security risks. It's about as bad as running an EOL operating system like CentOS 7.
39
CentOS-WebPanel Bugs / Re: CVE-2025-48703 + CVE-2026-57517: the gsocket systemd backdoor CWP's
« Last post by adrianofnatal on October 15, 2026, 02:05:21 PM »Check your servers for the file below:
Found this file suspect inside API v1 from CWP
/usr/local/cwpsrv/var/services/api/v1/deploy-all.sh
stat deploy-all.sh
File: deploy-all.sh
Size: 16458015 Blocks: 32152 IO Block: 4096 regular file
Device: fd00h/64768d Inode: 409139 Links: 1
Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2026-10-14 21:36:51.313172533 -0300
Modify: 2026-10-05 08:09:09.314262697 -0300
Change: 2026-10-05 08:09:09.314262697 -0300
Birth: 2026-10-05 08:09:09.284261891 -0300
This file is not part of CWP.
Checked my panel affected is running in php 5.6. This version has serious vulnerabilities and I don't know if can aI change this version.
Blocked por 2304 too, but if panel runs this version, any web access can accept this hack.
Found this file suspect inside API v1 from CWP
/usr/local/cwpsrv/var/services/api/v1/deploy-all.sh
stat deploy-all.sh
File: deploy-all.sh
Size: 16458015 Blocks: 32152 IO Block: 4096 regular file
Device: fd00h/64768d Inode: 409139 Links: 1
Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2026-10-14 21:36:51.313172533 -0300
Modify: 2026-10-05 08:09:09.314262697 -0300
Change: 2026-10-05 08:09:09.314262697 -0300
Birth: 2026-10-05 08:09:09.284261891 -0300
This file is not part of CWP.
Checked my panel affected is running in php 5.6. This version has serious vulnerabilities and I don't know if can aI change this version.
Blocked por 2304 too, but if panel runs this version, any web access can accept this hack.
40
CentOS-WebPanel Bugs / Re: NodeJS Manager show apps in stopped state even they're running
« Last post by adrianofnatal on October 15, 2026, 01:52:02 PM »Maybe CWP's PHP version?
Mine runs in 7.4, looking at PHP Version Switcher.
Im afraid that changing version could break panel.
Mine runs in 7.4, looking at PHP Version Switcher.
Im afraid that changing version could break panel.
