Search
Find merged stories by title or summary.
cPanel ConfigServer Security & Firewall Vulnerability Allows Remote Attacker to Execute Arbitrary Commands
A critical vulnerability in ConfigServer Security & Firewall (CSF), used on cPanel and WHM servers , could allow an unauthenticated remote attacker to execute arbitrary commands through the software’s MESSENGER service. The issue is tracked as CVE-2026-65638 and affects CSF versions 14. 00 through 16. 29. CSF version 16. 30 and later fixes the vulnerability. Administrators running affected installations should update the ConfigServer Firewall plugin immediately, especially where the MESSENGER feature has been manually enabled. The flaw exists in the CSF MESSENGER service, a feature intended to display messages to blocked visitors. According to the security release, a remote attacker does not need to authenticate to exploit the vulnerable service. Successful exploitation can result in arbitrary command execution under the CSF service account.
Critical ConfigServer Security & Firewall Flaw Lets Remote Attackers Execute Arbitrary Commands
A critical vulnerability in ConfigServer Security & Firewall (CSF) could allow unauthenticated remote attackers to execute arbitrary commands on vulnerable servers. Tracked as CVE-2026-65638, the flaw affects CSF versions 14. 00 through 16. 29 and has been resolved in version 16. 30 and later. The issue was identified in the MESSENGER service of ConfigServer Security & Firewall, a widely deployed firewall-management solution used on Linux hosting servers and cPanel & WHM environments. The vulnerable component could allow a remote attacker to execute commands as the CSF service account without requiring authentication. Critical ConfigServer Security & Firewall Flaw Although successful exploitation does not immediately grant root-level access, the vulnerability creates a serious remote code execution risk.
You've reached the end of current stories for this search.