Recent Posts
21
CentOS-WebPanel Bugs / Re: User cpanel URLs and login completely broken since CWP 1.18 update
« Last post by cyberspace on October 09, 2026, 10:10:57 PM »The folder:
/usr/local/cwpsrv/conf.d/users/
contains identical config files with minor changes for each user.
Just generate other config fiels for other users using the config file of the test user.
Additionally, make sure the folder:
/usr/local/cwpsrv/var/services/users
contains symlinks to /usr/local/cwpsrv/var/services/users for each user:
/usr/local/cwpsrv/conf.d/users/
contains identical config files with minor changes for each user.
Just generate other config fiels for other users using the config file of the test user.
Additionally, make sure the folder:
/usr/local/cwpsrv/var/services/users
contains symlinks to /usr/local/cwpsrv/var/services/users for each user:
22
CentOS-WebPanel Bugs / Re: [FIXED] CWP Cronjob Killing Server
« Last post by wingusupport on October 09, 2026, 08:10:57 PM »Thanks for the reply, @Starburst. One clarification on FIPS... Rocky Linux has an active FIPS 140-3 validation for its Rocky Linux 9 OpenSSL FIPS Provider, though that’s a validation of a specific cryptographic module, not a blanket certification of every Rocky Linux installation.
Have you successfully run CWP with FIPS mode enabled? I’d be interested to hear how that’s gone on a production server. I’d also be curious about your experience with SELinux on CWP if you've been successful there as well.
On “CentOS reloaded”... I meant that Rocky Linux was created to carry forward CentOS Linux’s role as a community-supported, RHEL-compatible downstream distribution. Its name honors Rocky McGaugh, a CentOS co-founder; Gregory Kurtzer, another CentOS co-founder, started the project.
Thanks again for the insightful replies!
Have you successfully run CWP with FIPS mode enabled? I’d be interested to hear how that’s gone on a production server. I’d also be curious about your experience with SELinux on CWP if you've been successful there as well.
On “CentOS reloaded”... I meant that Rocky Linux was created to carry forward CentOS Linux’s role as a community-supported, RHEL-compatible downstream distribution. Its name honors Rocky McGaugh, a CentOS co-founder; Gregory Kurtzer, another CentOS co-founder, started the project.
Thanks again for the insightful replies!
23
Information / Re: Possible CWP Security Issue – Malicious JavaScript Injection
« Last post by Starburst on October 09, 2026, 07:39:40 PM »Don't use a server using MariaDB, ImageMagick, OpenSSH, aaPanel, OpenDMARC, OpenPanel, cPanel, +more...
They are just some of the latest CVE's in the past 30 days that could allow remote code execution if you don't keep them up2date.
All EOL OS'es that have no security updates are a hacker's paradise right now also, e.g. CentOS 7.
They are just some of the latest CVE's in the past 30 days that could allow remote code execution if you don't keep them up2date.
All EOL OS'es that have no security updates are a hacker's paradise right now also, e.g. CentOS 7.
24
CentOS-WebPanel Bugs / Re: [FIXED] CWP Cronjob Killing Server
« Last post by Starburst on October 09, 2026, 07:34:20 PM »I will also go back to using Rocky Linux as it is the "reloaded" CentOS version. From my experience, Alma Linux has too many updates, too frequently.
Rocky Linux isn't the 'reloaded' CentOS. Some libraries are still missing.
So AlmaLinux keeps it's distro updated with too security fixes...
FYI - AlmaLinux has FIPS Certification, Rocky doesn't.
That says allot...
https://almalinux.org/security/fips-certification/
But glad everything is working for you.
25
CentOS-WebPanel Bugs / [FIXED] CWP Cronjob Killing Server
« Last post by wingusupport on October 09, 2026, 06:50:23 PM »Hello @overseer, @venty, @starburst and to all other interested parties:
Another recent round of updates seems to have cleared up the issue. We did NOT upgrade the MariaDB version or PHP-FPM versions to have a controlled environment. As of now, CWP is no longer "killing" the server.
We do note that PHP-FPM performance is terrible now. We have spent countless hours troubleshooting both of these issues. In the end, looks like we'll just need to execute a new CWP build and migrate the accounts. we will also go back to using Rocky Linux as it is the "reloaded" CentOS version. From our experience, Alma Linux has too many updates, too frequently.
The issue is now FIXED.
Thanks for helping out.
Another recent round of updates seems to have cleared up the issue. We did NOT upgrade the MariaDB version or PHP-FPM versions to have a controlled environment. As of now, CWP is no longer "killing" the server.
We do note that PHP-FPM performance is terrible now. We have spent countless hours troubleshooting both of these issues. In the end, looks like we'll just need to execute a new CWP build and migrate the accounts. we will also go back to using Rocky Linux as it is the "reloaded" CentOS version. From our experience, Alma Linux has too many updates, too frequently.
The issue is now FIXED.
Thanks for helping out.
26
Information / Re: Possible CWP Security Issue – Malicious JavaScript Injection
« Last post by adrianofnatal on October 09, 2026, 05:59:22 PM »I have the files.
Do you need them?
Im tired of cleaning server. Im stop using CWP for a while.
Do you need them?
Im tired of cleaning server. Im stop using CWP for a while.
27
CentOS-WebPanel Bugs / Re: User cpanel URLs and login completely broken since CWP 1.18 update
« Last post by Starburst on October 09, 2026, 03:46:27 PM »CWP 1.18 Admin (:2031) and User (:2083) interfaces are working fine on AL9.
What OS are you running?
What OS are you running?
28
CentOS-WebPanel Bugs / Re: User cpanel URLs and login completely broken since CWP 1.18 update
« Last post by simonjwoolf on October 09, 2026, 03:35:12 PM »Many thanks. I checked this and the value in /usr/local/cwpsrv/conf.d/users/USERNAME.conf was vary marginally different (identical to the values in /usr/local/cwpsrv/conf.d/users.conf) but correcting it as per your suggestion has not solved the problem.
Also, I don't know if it is significant, but the directory /usr/local/cwpsrv/conf.d/users/ was empty apart from the one user I had used to test the login (I have 12 clients hosted on the server)
I am seeing multiple issues as follows:
1. When trying to auto-login to a user's control from the admin panel, I get 404 errors on the format https://server.name:2083/username (forwarded from the cp link https://server.name:2083/token=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx)
2. If I go to the URL https://server.name:2083/ and enter a username and password, I get the "succesfully logged in" message briefly, then the browser forwards me back to the login page
This is the same for all user accounts on the server.
I am wondering if I should run the apache vhost rebuild script as suggested in the older thread about this problem.
Any thoughts?
Also, I don't know if it is significant, but the directory /usr/local/cwpsrv/conf.d/users/ was empty apart from the one user I had used to test the login (I have 12 clients hosted on the server)
I am seeing multiple issues as follows:
1. When trying to auto-login to a user's control from the admin panel, I get 404 errors on the format https://server.name:2083/username (forwarded from the cp link https://server.name:2083/token=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx)
2. If I go to the URL https://server.name:2083/ and enter a username and password, I get the "succesfully logged in" message briefly, then the browser forwards me back to the login page
This is the same for all user accounts on the server.
I am wondering if I should run the apache vhost rebuild script as suggested in the older thread about this problem.
Any thoughts?
29
Information / Re: To the CWP team and all its users (We are tired of getting hacked every day.)
« Last post by Starburst on October 09, 2026, 01:41:27 PM »At it's core, I agree with you sentiment about the basic software stack. But it sounds as if you would be happier with another panel, so probably best if you switched. CWP seems to be geared more toward the DIY system admin and is a budget-conscious panel. For me it is the perfect mix of features and cost. I for one can't afford a panel that costs 10x more annually -- my servers would not be a going concern at that point. Now that I am intimately familiar with CWP after 5 years of use, I can manage CWP servers with the resources available (the wiki, this forum, AWS Monster, AlphaGNU).
Aw man, I lost your love for starburst.help?
30
Information / Re: To the CWP team and all its users (We are tired of getting hacked every day.)
« Last post by Starburst on October 09, 2026, 01:40:04 PM »Those 'security issues' or CVE's where fixed last year, well before even CWP 1.x, and are getting old having to repost that same info over, and over, and over again...
Same as that BS about CWP being 'obsolete' and/or 'a dead project'.
CWP just released 1.18 on 2026-10-07, so if a 2 day old update is 'obsolete' or a a 'dead project', maybe goto cPanel...
If you have CWP Properly configured ON AL8 or AL9 with ModSecurity Properly configured and running, and CSF Properly configured and running there are no problems.
Which is easy, IF you are a trained system administrator.
Problem are with the EOL CentOS 7 OS, which is outside CWP's control.
CVE's can be found at:
https://sysadmin.help/viewforum.php?f=42
or goto:
https://www.cve.org/
Info is easy to find on alphagnu.com and starburst.help
FYI AlmaLinux 9 just release allot of system updates today, including for BIND, OpenSSL, ImageMagick.
AL9 released OpenSSH on 2026-10-04 to fix CVE's.
Not to mention all of the Kernel updates Linux has been pumping out for CVE's.
Same as that BS about CWP being 'obsolete' and/or 'a dead project'.
CWP just released 1.18 on 2026-10-07, so if a 2 day old update is 'obsolete' or a a 'dead project', maybe goto cPanel...
If you have CWP Properly configured ON AL8 or AL9 with ModSecurity Properly configured and running, and CSF Properly configured and running there are no problems.
Which is easy, IF you are a trained system administrator.
Problem are with the EOL CentOS 7 OS, which is outside CWP's control.
CVE's can be found at:
https://sysadmin.help/viewforum.php?f=42
or goto:
https://www.cve.org/
Info is easy to find on alphagnu.com and starburst.help
FYI AlmaLinux 9 just release allot of system updates today, including for BIND, OpenSSL, ImageMagick.
AL9 released OpenSSH on 2026-10-04 to fix CVE's.
Not to mention all of the Kernel updates Linux has been pumping out for CVE's.
