Panellicense
Knowledge base

276 articles on running a hosting business.

Install guides, migration playbooks, troubleshooting, and license maths. Search the whole library, or browse by product or category.

All articles

Updated 6 this week
Fix "proxy_lock refused proxy backend" errors on Plesk 18.0.82
Plesk 18.0.82 Update 2 and 18.0.81 Update 7 add mod_proxy_lock, which blocks AJP and Unix-socket proxies. How to confirm it and fix it without losing the check.
5 min readtroubleshoot→
cPanel CVE-2026-105476 and 105475: root file write, data leak
cPanel's 20 October notice fixes a root-owned file write (CVE-2026-105476, CVSS 8.8) and an unauthenticated calendar and contacts leak (CVE-2026-105475). Fixed builds and checks.
4 min readchangelog→
WHMCS 8.13 and 9.0 end of life: upgrade to 9.1 before 2027
WHMCS 8.13 and 9.0 stop receiving security fixes on 31 December 2026. What changes in 9.1, the ionCube and PHP order that matters, and when Blesta is the better move.
5 min readchangelog→
LiteSpeed LSQUIC HTTP/3 critical flaw: update to 6.3.7 build 8
A critical LSQUIC flaw hits LiteSpeed Enterprise, OpenLiteSpeed, and Web ADC servers with HTTP/3 on. Patch to 6.3.7 build 8 before public disclosure on 16 November 2026.
4 min readchangelog→
Migrate an InterWorx server from RHEL to AlmaLinux
Move an InterWorx server off RHEL onto AlmaLinux — new-box Mass Import or in-place almalinux-deploy, backup.pex and import.pex flags, licence overlap, and cutover.
7 min readmigration→
CVE-2026-98432: remote kernel TCP flaw on CloudLinux servers
CVE-2026-98432 is a remote use-after-free in the kernel's IPv4 TCP code. Affected CloudLinux versions, fixed kernels, the Red Hat nftables mitigation, and KernelCare status.
6 min readchangelog→
Fix intermittent 502 errors on cPanel webmail service subdomains
Fix intermittent 502 Bad Gateway errors on cPanel webmail, cpanel, and whm service subdomains after a 136 or 138 update, using a two-line Apache include.
5 min readtroubleshoot→
Plesk Obsidian 18.0.82 release notes: what hosts need to know
Plesk Obsidian 18.0.82 fixes an admin MFA bypass, adds a Python extension and Node.js Toolkit CLI, drops Debian 11, and Update 1 patches Brotli CVE-2026-111497.
5 min readchangelog→
ZDI-CAN-33367: leaked kernel local root zero-day on CloudLinux
ZDI-CAN-33367 is a public-exploit kernel local root with no CVE yet. Which CloudLinux versions are exposed, the user namespace mitigation, beta kernels, and KernelCare status.
5 min readchangelog→
cPanel AI App Hosting: enable Node.js apps for customers
How to enable cPanel AI App Hosting on a v138 server: the Web Apps feature, the customer deploy flow, MySQL, health checks, CloudLinux quirks, and cleaning up deploy files.
8 min readhow to→
Switch in an afternoon

Switch from your current reseller — free.

We migrate active cPanel, Plesk, LiteSpeed and CloudLinux licenses from any reseller. We prorate the first month so you never pay twice, and your customers see zero downtime during the swap.