CWPSRV backdoor announced in some security websites

[Starburst]

Lookup CVE-2026-42945 from May 2026. It's aka NGINX Rift

That RCE went out in the middle of May.

Thru that and really any RCE, even the one PHP had a few weeks ago, could allow a hacker to deploy the CWPdoor payload or other SSH backdoors.

So even if you fixed whatever caused the original RCE, CWPdoor would still be there.

[djprmf]

Lookup CVE-2026-42945 from May 2026. It's aka NGINX Rift

That RCE went out in the middle of May.

Thru that and really any RCE, even the one PHP had a few weeks ago, could allow a hacker to deploy the CWPdoor payload or other SSH backdoors.

So even if you fixed whatever caused the original RCE, CWPdoor would still be there.

"So even if you fixed whatever caused the original RCE, CWPdoor would still be there."

Exactly! Welcome to the exact point I made in my very first reply to this thread.

You have just perfectly explained why I said a panel update doesn't automatically clean a compromised system. Patching the initial entry vector (whether it is an Nginx RCE, a PHP bug, or anything else) stops new attacks, but it does absolutely nothing to remove the post-exploitation backdoor that is already running in the background.

This is exactly why your initial claim - telling everyone "these are OLD, and have been fixed since 1.25" - was so dangerous. Updating to 1.25 fixes the software, but it leaves the CWPdoor backdoor completely untouched.

That is precisely why the publication of these specific IoCs (Indicators of Compromise) by XLab this week is so important. SysAdmins need this new threat intelligence to hunt down the exact backdoors that regular updates leave behind.

As for your mention of CVE-2026-42945 - please don't try to muddy the waters with completely unrelated vulnerabilities. That specific Nginx CVE has absolutely nothing to do with the targeted CWPdoor malware campaign detailed in the XLab report.

[Martins-phpbb]

Ok boys n girls i have a spare room if you wanna get it on.

This is like watching an episode of love island.