Recent Posts

Pages: 1 ... 5 6 [7] 8 9 10

PHP / Re: Update your PHP ASAP 🚨

« Last post by muscator on October 24, 2026, 10:45:11 PM »

Hmnn, yes, but the changelog says latest version is 1.23...

https://control-webpanel.com/changelog

Updates / RockyLinux 9 is stuck in CWP 1.21

« Last post by julianmaria on October 24, 2026, 10:07:20 PM »

I have 2 servers running Rocky 9.8. They were updated to 1.21 on Thursday 21 but even forcing them to update to 1.24 today 24/oct, version 1.21 remains

PHP / Re: PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patch

« Last post by overseer on October 24, 2026, 08:51:03 PM »

TL;DR: In every php.ini, set:

Code: [Select]

session.upload_progress.enabled = Off

PHP / Re: Temporary fix for CVE-2026-115560

« Last post by Starburst on October 24, 2026, 08:50:57 PM »

Quote from: overseer on October 24, 2026, 08:49:09 PM

TL;DR: In every php.ini, set:
Code: [Select]
session.upload_progress.enabled = Off

That work's also.
After you un-comment the line.

PHP / Re: Temporary fix for CVE-2026-115560

« Last post by overseer on October 24, 2026, 08:49:09 PM »

TL;DR: In every php.ini, set:

Code: [Select]

session.upload_progress.enabled = Off

PHP / Re: PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patch

« Last post by Starburst on October 24, 2026, 08:12:32 PM »

Just posted a temporary fix for this 'bug'.

https://starburst.help/security/temporary-fix-for-cve-2026-115560/

PHP / Temporary fix for CVE-2026-115560

« Last post by Starburst on October 24, 2026, 08:09:13 PM »

We have published a temporary fix for Temporary fix for CVE-2026-115560 that affect's all PHP versions.

The knowledge Base article can be found at:
https://starburst.help/security/temporary-fix-for-cve-2026-115560/

Full Article can be found at:
https://thehackernews.com/2026/10/urgent-php-warns-of-another-unpatched.html

PHP / Re: Update your PHP ASAP 🚨

« Last post by emerysteele on October 24, 2026, 07:45:02 PM »

Quote from: muscator on October 24, 2026, 11:23:42 AM

On almalinux9, running the new php-fpm 8.3.36 and cwppro 1.23 - the internal cwp php version is still:

/usr/local/cwp/php71/bin/php -v
PHP 7.4.33 (cli) (built: Apr 26 2023 00:00:00) ( NTS )
Copyright (c) The PHP Group
Zend Engine v3.4.0, Copyright (c) Zend Technologies
with the ionCube PHP Loader + ionCube24 v15.5.0, Copyright (c) 2002-2026, by ionCube Ltd.

Apparently others run the internal 8.3.36 and not the old 7.4.33

Any suggestions why?

I think 1.24 is the version with the php patch. At least thats what version my admin dashboard says: CWPpro version: 1.24

Run /scripts/update_cwp again?