Messages

1

Installation / Re: CWP Fresh install on Almalinux 9 Error root login

« on: July 13, 2026, 02:14:59 PM »

Is your data center image based on the full/DVD installer, or the minimal install? You need a full install, not minimal.

2

Other / Re: New CVEs in Linux Kernel: CVE-2026-53359, CVE-2026-46242, CVE-2026-43499

« on: July 10, 2026, 03:14:05 AM »

Let the summer of AI fuzzing continue!

3

CentOS-WebPanel Bugs / Re: CVE-2025-48703 + CVE-2026-57517: the gsocket systemd backdoor CWP's

« on: July 08, 2026, 02:43:22 PM »

Changing SSH port is imperative IMO.

Definitely don't run on port 22, and even 2222 is not safe from FritzFrog:
https://arstechnica.com/information-technology/2022/02/after-lying-low-ssh-botnet-mushrooms-and-is-harder-than-ever-to-take-down/

4

CentOS-WebPanel Bugs / Re: CVE-2025-48703 + CVE-2026-57517: the gsocket systemd backdoor CWP's

« on: July 08, 2026, 03:03:48 AM »

None of my servers were hit. Probably because I'm running low on the radar to script kiddies, worms, and Shodan.
https://azdigi.com/en/blog/webserver-panel/centos-web-panel/how-to-change-the-port-on-centos-web-panel-cwp
https://wiki.centos-webpanel.com/how-to-change-ssh-port

5

Updates / Re: Dev Team went rogue ?

« on: July 07, 2026, 01:34:34 PM »

I read the script. Your theory is definitely worthy of Ian Flemming. Refutation straight from the Administrator's keyboard:

Dev Team Member went Rogue and start Hacking CWPro servers, thats why the updates.

nope, only new hackers with AI are now attacking...but we solve them.

6

CentOS-WebPanel Bugs / Re: CVE-2025-48703 + CVE-2026-57517: the gsocket systemd backdoor CWP's

« on: July 07, 2026, 01:29:32 PM »

Thanks, but maybe some introductions are in order...

7

Updates / Re: update 0.9.8.1239 remove all users database + postfix acc

« on: July 07, 2026, 02:07:10 AM »

Now at 0.9.8.1244. Rapid update with small fixes.

8

Other / Re: Yanz Webshell! - PRIV8 WEB SHELL ORB YANZ BYPASS! V3.0

« on: July 06, 2026, 07:38:30 PM »

But the sky is falling... you're aware of that, right? The sky is falling! The sky is falling!

9

Updates / Re: Dev Team went rogue ?

« on: July 06, 2026, 01:56:30 AM »

Quite the conspiracy theory... is there bona fide proof?
Juicy plot line -- I'm starting to hear a James Bond theme play... or maybe the Mission Impossible theme...

10

Updates / Re: update 0.9.8.1239 remove all users database + postfix acc

« on: July 05, 2026, 05:25:45 PM »

Now 0.9.8.1243 on the fast track (not Stable/2 weeks tested).

11

Updates / Re: update 0.9.8.1239 remove all users database + postfix acc

« on: July 05, 2026, 12:58:25 AM »

I still show 0.9.8.1239 as the current version.

12

E-Mail / Re: RoundCube 1.5.12 Released

« on: July 05, 2026, 12:56:42 AM »

It's a prerequisite; see directions here:
https://www.alphagnu.com/topic/33-update-cwp-roundcube-mail-version-158-%E2%80%93-control-web-panel/

Code: [Select]

dnf update ca-certificates -y
dnf install -y libicu50
rpm -ivh https://github.com/mysterydata/md-disk/raw/main/libicu69-69.1-4.el8.x86_64.rpm
curl -s -L https://www.alphagnu.com/upload/tmp/el8/cwp_rc_fix_el8.sh | bash

13

Updates / Re: update 0.9.8.1239 remove all users database + postfix acc

« on: July 03, 2026, 04:04:50 AM »

Edit the /usr/local/cwpsrv/htdocs/resources/scripts/temp_hacker_check script like so:

Code: [Select]

#!/bin/bash
exit 0
...

14

Updates / Re: Did 0.9.8.1239 remove extra DB users?

« on: July 02, 2026, 02:03:19 PM »

Just a little recommendation: in addition to running daily backups, also consider running AutoMySQLBackup to dump you DB daily:
https://github.com/sixhop/AutoMySQLBackup

15

CentOS 8 Problems / Re: Remove permanently goaccess

« on: July 02, 2026, 02:01:28 PM »

And you have the GoAccess box unchecked at CWP Settings > Edit settings ?
/admin/index.php?module=settings