8 min
cPanel update tiers: EDGE, CURRENT, RELEASE, STABLE, LTS
Your update tier decides when a major cPanel version lands on your fleet. Here is what each tier points at today, how to set it, and how to stagger upgrades across servers.
2026-08-25
7 min
CVE-2026-33278: the cpanel-unbound DNSSEC RCE, and how to check for it
A critical Unbound DNSSEC validator bug shipped as cpanel-unbound puts remote code execution one malicious signed zone away, no login required. Patched builds and how to check exposure.
2026-08-17
7 min
CVE-2026-41940: the cPanel & WHM auth bypass, and how to check for it
A CRLF injection in cpsrvd session handling let unauthenticated attackers write user=root into their own session file. Patched versions, IOCs, and how to check if you were hit.
2026-07-23
6 min
How to move a cPanel license to a new server or IP address
cPanel licenses are bound to a primary IP, not a server. Here's how to repoint one to a new IP after a migration, IP change, or provider swap without downtime.
2026-07-22
7 min
Set up a remote MySQL server for cPanel with WHM profiles
Offload MySQL to a dedicated database host using WHM's Manage MySQL Profiles — the setup steps, the grants it needs, data migration, and the CloudLinux Governor tradeoff.
2026-07-12
7 min
Enable and control Sitejet Builder in cPanel and WHM
Sitejet Builder ships free with cPanel 116+. Turn it on per package, hide it where you don't want it, understand the premium upsell, and avoid the document-root overwrite that eats live sites.
2026-07-03
6 min
Upgrade MariaDB or MySQL on cPanel/WHM without breaking it
A version bump in WHM is a one-way door — no downgrade, no revert to MySQL. The exact path through major versions, plus the CloudLinux Governor route.
2026-06-13
10 min
cPanel account suspension: WHM workflow, automation, and unsuspension
How cPanel suspension actually works under the hood, the WHM and API workflows, custom reasons and pages, and the gotchas that bite when you unsuspend an account.
2026-05-25
8 min
WHM packages and feature lists: structure tiered hosting plans
How to build cPanel packages and feature lists that map cleanly to tiered hosting plans — quotas, LVE, defaults, and the failure modes when wiring into Blesta or WHMCS.
2026-05-24
8 min
CloudLinux reseller limits: cap LVE per reseller in WHM
How to use CloudLinux reseller limits to cap CPU, memory, and entry processes per reseller in WHM — so one reseller's accounts can't take down the whole shared server.
2026-05-18
8 min
WHM two-factor authentication: enforce TOTP for root and resellers
Turn on WHM two-factor authentication, enrol root and reseller accounts, audit who has it active, and close the gaps cPanel's built-in 2FA leaves behind — API tokens, SSH, and lost devices.
2026-05-17
7 min
WHM Tweak Settings worth changing on a new cPanel server
The 18 Tweak Settings in WHM that matter day one — mail throttling, SMTP restrictions, cookie IP validation, and the cPanel defaults you almost always want to change.
2026-05-17
9 min
WHM Standardized Hooks: automate cPanel events with scripts
WHM Standardized Hooks run a script of yours before or after almost any cPanel event — account creation, password change, SSL install — and let pre-hooks block actions outright.
2026-05-17
8 min
Enable DNSSEC for cPanel-hosted zones without breaking resolution
A working DNSSEC rollout for cPanel — enable per-zone signing, publish the DS record at your registrar, verify with dig, and survive the first key rollover without going dark.
2026-05-17
8 min
Change a cPanel WHM hostname without breaking license, mail, or SSL
A clean WHM hostname change takes 15 minutes if you do it in order. The mistakes that cost an afternoon — broken services SSL, license re-checks, mail HELO mismatches, and rDNS — all in one playbook.
2026-05-17
10 min
Connect Blesta to cPanel/WHM for automatic account provisioning
Wire the cPanel module in Blesta to a WHM server with a scoped API token so new orders create accounts on their own, complete with package mapping, nameserver swap and suspension hooks.
2026-05-17
8 min
WHM Transfer Tool: move cPanel accounts between servers
Use WHM's built-in Transfer Tool to move single accounts or an entire server's worth of users between cPanel boxes — SSH setup, Express Transfer, DNS cutover, and the failures you'll actually hit.
2026-05-16
8 min
Set up WHM reseller accounts with the right ACLs
Reseller accounts are how you sublease a cPanel server. Set the wrong ACLs and the reseller can suspend your accounts or restart Apache — here's the safe baseline.
2026-05-16
6 min
Tune WHM cPHulk brute force protection without lockouts
A working cPHulk configuration for shared cPanel servers — whitelist, thresholds, country blocking, notifications, and the CLI commands that get you back in when you lock yourself out.
2026-05-16
8 min
Create and scope WHM API tokens for safe automation
WHM API tokens replace root passwords for billing scripts, monitoring agents, and Blesta or WHMCS integrations — here's how to scope them tightly and rotate them safely.
2026-05-16
7 min
Read LVE Manager Statistics to find the offending account
Use WHM's CloudLinux LVE Manager Statistics to map PMemF, EPf, and NprocF columns to the user, script, and time window causing the spike.
2026-05-16
4 min
Add a new PHP version in EasyApache 4 without breaking sites
Add a PHP build in EasyApache 4, pick extensions, assign per-domain handlers, and recover when the Review stage stalls or rolls back.
2026-05-16
8 min
Exim outbound throttling on cPanel: stop spam before blacklisting
Layered Exim limits, per-account caps, and queue triage on cPanel so one compromised WordPress install can't bury your server's IP on Spamhaus by lunchtime.
2026-05-16
5 min
Fix WHM AutoSSL failures — a decision tree
AutoSSL fails in five distinct ways. Identify which one you're hitting from the WHM log line, then apply the fix — DNS, HTTP-01, CAA, rate-limit, or DCV redirect.
2026-05-15
5 min
How to fix cPanel license invalid and verification errors
A 5-minute decision tree for the "License invalid" banner in WHM — covers IP changes, blocked outbound 2089, time drift, and the cpkeyclt refresh that fixes most of them.
2026-05-15
1 min
WHM "Account creation failed: quota exceeded" — fix it
The three places this error actually comes from — the license, the disk, or the package. A 5-minute decision tree.
2026-04-04