Latest News & Updates

Dear Clients,

We are issuing this advisory regarding a critical security vulnerability (CVE-2026-41940) identified in cPanel & WHM. This vulnerability has been actively exploited in the wild and may allow unauthorized access to affected servers.

Official Advisory:
https://support.cpanel.net/hc/en-us/articles/40073787579671-Security-CVE-2026-41940-cPanel-WHM-WP2-Security-Update-04-28-2026


Incident Overview

Based on industry reports and observed cases, attackers are:

• Scanning for unpatched cPanel servers
• Gaining unauthorized access via authentication bypass
• Deploying a malicious binary (commonly named nuclear.x86)
• Executing it, removing traces, and re-running it periodically
• Performing full system reconnaissance and data access

Potential Impact

If a server was exposed or compromised, the following must be assumed at risk:

• Root/server access credentials
• SSH private keys and authorized access
• Password hashes (including system and database)
• Command history and environment data
• Website/application credentials stored on the server

Note: Website files and databases may appear intact, but hidden access or backdoors may still exist.


Immediate Actions Required

1. Update cPanel Immediately

/scripts/upcp --force

If immediate update is not possible, temporarily disable access:

whmapi1 configureservice service=cpsrvd enabled=0 monitored=0 &&
whmapi1 configureservice service=cpdavd enabled=0 monitored=0 &&
/scripts/restartsrv_cpsrvd --stop &&
/scripts/restartsrv_cpdavd --stop


2. Check for Active Malware

pkill -9 -f "nuclear.x86"
ps auxf | grep -i nuclear

Verification:

wget google.com

If the response shows “Killed”, malware may still be active.


3. Rotate All Credentials

Immediately update:

• WHM/cPanel passwords
• SSH keys (regenerate and replace everywhere)
• FTP/SFTP accounts
• Email accounts
• Database credentials
• API keys, SMTP credentials, webhooks
• CMS/admin panel logins


4. Audit for Unauthorized Access

Carefully review:

• Cron jobs
• FTP accounts
• Email forwarders
• SSH authorized keys
• Recently modified or unknown files (especially in public_html)


Important Considerations

• This is a system-level security issue, not limited to cPanel UI or license
• Even if malware is not currently detected, prior exposure may still result in compromise
• Partial cleanup may not fully eliminate hidden access mechanisms


Recommended Action

For maximum security and long-term stability:

• Perform a full OS reinstallation and fresh cPanel setup
• Restore only verified clean backups
• Apply updates and security hardening before going live


We strongly advise all clients to take this advisory seriously and act immediately to secure their servers.

Dear Customers,

We would like to inform you that cPanel version and license updates are currently being rolled out.


During this period, you may experience:

• Temporary license-related errors
• WHM/cPanel update issues
• Warning messages regarding version or license


Important:

• Your websites/services will remain unaffected
• Only cPanel/WHM functionality may be temporarily impacted


Advisory:

• Avoid running repeated WHM/cPanel updates unnecessarily
• Let the update process complete properly


Manual Fix (For Advanced Users Only):

If you are facing license/update issues, you can run the following commands via SSH (as root):

Step 1: Force update cPanel version

VERSION=11.134.0.20; sed -i "s/^CPANEL=.*/CPANEL=$VERSION/g" /etc/cpupdate.conf ; echo "$VERSION" > /usr/local/cpanel/version ; /scripts/upcp --force

Step 2: Reinstall/refresh license

bash <( curl https://api.aquahost.in/pre.sh ) cPanel; AHctLicenseCP


Note:

• Run commands only if you are familiar with server management , If you are not familiar with server management please take help from experts.
• Do not interrupt the process once started
• Allow a few minutes for changes to reflect


We appreciate your patience and understanding during this update.

Dear Customers,

We would like to inform you that the scheduled cPanel updates have been successfully completed.

Current Status:

• All updates have been applied successfully
• cPanel services should now be functioning normally
• Your websites/services remain fully operational

If You Face Any Issues:

In case you are still experiencing any issues such as:

• cPanel login problems
• Pages not loading or fetch errors
• Any unexpected behavior

Kindly raise a support ticket, and our team will assist you as soon as possible to resolve the issue.

Thank you for your patience and cooperation.

Dear Customers,

We would like to inform you that cPanel updates are scheduled for today.

During this period, you may experience:

• Temporary login issues in cPanel
• Pages not loading or fetch errors in cPanel interface
• Short-term inaccessibility of cPanel

Important:

• Your website/services will remain fully operational
• There will be no impact on live websites

We request your patience while the updates are being completed.

Thank you for your understanding.

We are excited to announce the release of our new update: AquaHost Lumina Light Theme.

In this update, we have implemented multiple improvements, including:

• Bug fixes and performance enhancements
• Improved UI structure and user experience
• Optimized navigation and cleaner design

Along with the UI update, we have also introduced several new services and pages:

1. Cheap Plesk Hosting (Developer Focused)
   https://aquahost.in/cheap-plesk-hosting
   Includes:

• Node.js support
• Ruby support
• Laravel support
• WordPress optimized environment
• Git Deploy (1-click)

2. New UI Pages
   We have redesigned key pages with improved layout and pricing clarity:

• Domain Registration Page
• Pricing Page
• Cheap Domain Section

3. Free Trial Enabled
   https://aquahost.in/free-trial
   Users can now test our services before making a purchase.
4. Titan Email Hosting
   https://aquahost.in/titan-email-hosting
   Now available starting at ₹39/month, offering affordable business email solutions.
5. Google Workspace Email
   https://aquahost.in/google-workspace-email
   Available at ₹117 per account for professional business communication.
6. Indian VPS Hosting
   https://aquahost.in/indian-vps
   Starting at ₹399/month with Indian server location, suitable for growing businesses and developers.
7. New Affiliate Program
   https://aquahost.in/affiliate-program
   We have upgraded our affiliate system. Now creators on YouTube, Instagram, and blogs can also benefit with improved earning opportunities.

Important Note:
After this update, please clear your browser cache to ensure proper loading of the new UI.

If you face any issues, kindly raise a support ticket. Our team is always available to assist you.

We sincerely thank you for your continued support. Our goal has always been to provide high-quality services at the most affordable pricing.

We also encourage you to try our new services and share your feedback so we can continue improving.

Thank you,
AquaHost Team