CloudLinux — Cyber Attacks, Breaches & Threat Activity

Overview

CloudLinux is a software and cybersecurity company best known for hosting-focused security products such as ImunifyAV and Imunify360, along with the CloudLinux OS, LVE, and CageFS. Its solutions are widely deployed on Linux hosting environments, making its products critical to the security posture of many web servers; a vulnerability in its security tooling can have wide-reaching impact in the Linux hosting ecosystem.

Related Threat Clusters

• Multiple Vulnerabilities in cPanel & WHM Posed Security Risks

  On May 8, 2026, cPanel & WHM released patches for three critical vulnerabilities: CVE-2026-29201, CVE-2026-29202, and CVE-2026-29203. CVE-2026-29201 allows arbitrary file reads due to inadequate validation in the…

  3 articles · Updated May 10, 2026
• CISA Issues Urgent Warning on Actively Exploited LiteSpeed cPanel Plugin Vulnerability

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding a critical vulnerability (CVE-2026-54420) in the LiteSpeed cPanel user-end plugin, which allows attackers with FTP or web…

  5 articles · Updated June 16, 2026
• Critical Linux Vulnerability 'Copy Fail' Grants Root Access Across Major Distros

  A newly disclosed vulnerability in the Linux kernel, tracked as CVE-2026-31431 and named 'Copy Fail', allows unprivileged local users to gain root access on virtually all major Linux distributions released since 2017.…

  227 articles · Updated April 30, 2026
• Critical RCE Vulnerability in ImunifyAV Affects Millions of Linux Servers

  A remote code execution vulnerability was found in the AI-Bolit component of ImunifyAV, impacting millions of Linux servers and websites. This flaw allows attackers to execute arbitrary code and escalate privileges to…

  4 articles · Updated November 18, 2025
• Critical RCE Vulnerability in Imunify360 Affects Millions of Websites

  A Remote Code Execution vulnerability in Imunify360 AV has been identified, allowing attacker code to run during malware scans. This flaw affects millions of websites supported by hosting providers using Imunify360,…

  1 article · Updated November 14, 2025

Recent Intelligence Reports

• Security Update For Litespeed Cpanel Plugin 2 — blog.litespeedtech.com · June 16, 2026
• CISA warns of another cPanel plugin flaw exploited in attacks — Bleepingcomputer · June 16, 2026
• CISA warns of LiteSpeed cPanel plugin flaw allowing root access — Feeds.4Sysops · June 16, 2026
• Dirty Frag gets a sequel as Fragnesia hands Linux attackers root — Theregister · May 14, 2026
• CVE-2026-29203 — support.cpanel.net · May 10, 2026
• RCE flaw in ImunifyAV puts millions of Linux — Bleepingcomputer · November 13, 2025

Related Entities