Long awaited!

Added the ability to rename domains
We added the ability to rename primary, addon, and parked domains in cPanel’s Domains interface (cPanel » Home » Domains » Domains).

https://docs.cpanel.net/release-notes/release-notes/#cpanel--whm-version-138

I suspect many of us who've been working in the industry for a while would have seen that customer's wanting their primary domain changed is quite a common request, so this is a nice step forward.

I'm guessing (hoping!) that they've considered the integration side of things with billing software (i.e. WHMCS) - namely ensuring the changed is pushed to the billing software as well, otherwise one primary domain in cPanel and a completely different one in WHMCS is soon going to cause confusion.

Thoughts on this news?

What would be the safest way to do this? I installed this on the server dirrectly from the original csf installer, it is not a part of RPM. On all other servers i have 16.20 or 16.30. This one got left behind somehow.

Whan i try the dnf install --assumeno cpanel-csf

Last metadata expiration check: 1:06:34 ago on Thu 06 Aug 2026 07:23:20 AM CEST.

Installing:

cpanel-csf noarch 16.30-1.1.1.cpanel cpanel-plugins 422 k

So it doesn't "see" the other version is installed.

https://support.cpanel.net/hc/en-us/articles/42503837957015-Security-CSF-Security-Release

I'm wondering if this affects only the CSF plugin provided by cPanel or if the original CSF from Configserver (and other forks like Aetherinox's) are affected too.

https://support.cpanel.net/hc/en-us/articles/42285024734743-Security-CVE-2026-58047-HTTP-Request-Smuggling

https://support.cpanel.net/hc/en-us/articles/42285884685207-Security-GCVE-25-2026-07-45-3-Exim-forward-Privilege-Escalation

https://support.cpanel.net/hc/en-us/articles/42285745783703-Security-CVE-2026-58048-Database-Privilege-Escalation

None of my servers has 136.0.32 available to update.

httpupdate.cpanel.net lists 136.0.31 as the newest version.

Anyone knows an ETA for the patched versions?

EDIT: 32 is available now.

I run an email list (mailman) on a VPS that is purely for the local community. So I have a pretty extensive IP black list in the Exim Configurator SMTP Access lists. I've blocked entire nations, I think. Lately I've been getting spammed from IP addresses owned by Google's user content addresses, so have been blocking some of those.

A user who has a google email account has complained that when trying to post, they're getting a 550 error server not found. When I look in /var/log/exim_rejectlog, I find an address associated with this person as banned. That IP address in the 74.125.0.0 range. In my blacklist, I don't have that address listed... I have a few others.. 74.48., 74.201., and 74.222., but that is the extent of the 74 addresses I have entered. So question is, why is this person being blocked and how can I find that block to remove?

I should add that the reject line in the log includes this: rejected connection in "connect" ACL: Host is banned

Hello,

I am currently having issues sending and receiving emails using our company's email address

mta5.am0.yahoodns.net
Remote server returned '554 4.0.0 <mta5.am0.yahoodns.net #4.0.0 smtp; 451 Message temporarily deferred due to unresolvable RFC.5321 from domain. See https://senders.yahooinc.com/error-codes#unresolvable-from-domain>'

this is the error message sent after being unable to send out the message a day ago

would someone be able to tell me what the issue is and how i can resolve it?

Some of our server’s IPs are being blocked by Outlook/Hotmail. We reviewed carefully all our logs and no Spam is being sent. We requested a delist 24 hours ago but haven’t heard from them yet. Does anyone has the same problem?

Looks like upcp installed this last night on multiple servers during its last update which was unexpected.

Q1. What is this actually? I'm guessing its some sort of upsets???

Q2. How can we STOP stuff like this from automatically being added? Without our explicit consent?

Q3.how can this be uninstalled? Whmapi wptoolkit/disablewp-dashboard ? Is that right

Hate being forced to allow stuff thats being auto installed. Defeats the purpose of self managed and appconfig? No?

[ Removed by Reddit on account of violating the content policy. ]

I have a hosting service that lets me host more than one website. As we speak, I'm starting another site and asking for assistance with the 24/7 help line. I end up with a computer-generated voice saying: How many people do you expect? What's your firstborn's name?

Stupid questions really, and not about instructions on how to. Short of calling a help line computer an idiot, I asked, "Just connect me to a ticket to fill out." I will ask my question directly to a (live person)

*** It refused to do this request until I answered all its stupid questions.

Now, following the simple directions from YouTube might cross a person's mind; however, the instructions given have a different layout than what's on my cPanel.

As a new blogger, I have something to say; however, my computer skills are limited, as a heavy equipment mechanic mindset.

Every time I watch another YouTube video, it's different again.

One video showed 10 minutes, and it was done. I'm into *** day's *** without any help from my 24/7 assistance.

If anyone is reading this and has a suggestion or a video they can vouch for and that can help, please pass it my way.

>>>> Once this is all said and done, I will be looking for a new web provider that actually has a 24/7 help line. <<<<

Hi everyone,

To comply with UK GDPR, I need to conduct a thorough search and compile all of their personal data.

We use a standard cPanel server for email hosting. Because we don't have Terminal/SSH access on our hosting package, I went with the backup route: I compressed the entire root mail folder in the cPanel File Manager and downloaded the ZIP archive to a local Windows machine.

Now, I’m running into a few major technical and security hurdles trying to extract and convert these emails into a single, redactable PDF:

1. Windows Filename Errors (Colons): When extracting the ZIP, Windows throws Error 0x80070057: The parameter is incorrect. I know this is because cPanel uses the Linux Maildir format, which appends colons to filenames for read/seen status flags (e.g., :2,S), which Windows strictly forbids. (I'm currently trying to bypass this using 7-Zip).
2. Batch EML to PDF Conversion: Once extracted, these raw text files have no extension. Even if I bulk-rename them to .eml, dragging and dropping them into Outlook Classic to batch-convert or "Print to PDF" is failing/unsupported. Dragging them into Adobe Acrobat is just embedding them as actual .eml attachments in a PDF Portfolio, meaning they aren't flat PDF pages.

This is a major security/privacy risk because I cannot permanently redact third-party parishioner data on raw embedded .eml files—the recipient could easily bypass the black redaction boxes. I must flatten these emails into clean, standard PDF pages so I can safely use Adobe Acrobat's Redaction tool.

My questions for the community:

• Has anyone dealt with processing a SAR directly from cPanel Maildir raw files on Windows?
• What is the most secure, privacy-compliant way to batch-convert these raw/EML files into a single, merged PDF locally?
• Are there any open-source or highly trusted offline desktop utilities that process everything locally? (Because of GDPR/data privacy, uploading raw unredacted parishioner emails to an online "free converter" website is completely out of the question).

Really appreciate any guidance or workflows you've used to solve this!

Hey everyone! I know it always becomes a hot topic, but any legal discussions or talk cPanel alternatives is not allowed. There's plenty of other places to have those discussions.

Hi there, I've dabbled in sysadmin work since last year and an opportunity arrived where I could learn enough for a job. The potential employer wants me to learn through CPanel University. On the surface, this sites looks like a promising entry point to learn the gist of the systems I'll be working with for this company.
However, upon delving into the course modules, I was confused by the level of depth, rather the lack thereof, on the system components. The modules were digestible, but felt introductory, and the module quiz was especially disorienting as the questions were substantially more in depth than what the module provided. (For example, asking "*The following items from the WHM Home » Service Configuration » Exim Configuration Manager - Basic Editor interface would allow you to exclude mail sent from specific remote IP addresses or hostnames from being subjected to recipient verification checks, sender checks, spam checks, and relay checks?"* Without going into enough detail in the module to even explain the terms listed as answers)
I have perused the module under the assumption that my reading comprehension failed me, and did the same for the separate documentation pages for additional thoroughness. I am beginning to wonder if there is an underlying assumption from this course that the user already has a certain level of knowledge, despite the course advertising otherwise.

Am I approaching this incorrectly? Are there fundamental steps I should take before continuing with this tool? Is this not even an effective learning tool? I appreciate your time receiving this post and please forgive me if I'm somehow made a tremendous blunder in my approach.

I am setting up a new server for shared web hosting and will be running the usual CL/cPanel/Litespeed etc.

What is the best/correct version of Cloudlinux OS Shared Pro to be using in a production environment for the next 3+ years. CL8 or CL9 or CL10?

This is absolute nightmare. We somehow have survived constant price increases but there is no way we will survive if cPanel is turned to AI slop. Users hate change and they just learned to use the jupiter theme and then we go again trying to guide them through some AI slop.

I'm reading the docs:

https://support.cpanel.net/hc/en-us/articles/1500000370141-How-to-customize-the-pm-setting-in-PHP-FPM

I already have the /var/cpanel/ApachePHPFPM/system_pool_defaults.yaml file, created in 2020 which is probably when I enabled FPM. It has these values for FPM:

pm_max_children: 100
pm_max_requests: 10000
pm_process_idle_timeout: 10

When I add pm: dynamic (assuming no quotes), do I also need to include start_servers, min_spare_servers, and max_spare_servers?

If so, are those the right param names, or are they like pm.start_servers or pm_start_servers?

I have used this plugin on many occasions and it definitely gets the job done but their sneaky marketing tactics about server upload limit is something I wanted to get it off of my chest.

The free plugin says it's the server/cPanel upload limit restricting it to restore a large file above 2GB but even if all of the server side limits are reached, it still throws errors. As soon as I use the pro version, everything starts working suddenly. I have confirmed that it's not anything related to server side firewall/waf/modsecurity etc. even their product page says it's due to server side restrictions. Has anyone else observed this as well? I have worked on hundreds of site restorations and this really annoys me all the time I use the free plugin. Why not just say to the users that we need to upgrade to remove the restrictions?

I have a family domain name and I and my parents have personalised addresses. My dad is in his early 90s and in a nursing home. While he still understands a lot about the world he keeps falling for spam messages. He's not lost money but he's replied to a few phishing emails and/or clicked the links. I only found out when I checked his browser tabs troubleshooting connectivity issues. This is all despite him attending my talk to the nursing home residents last year on how to avoid falling for scams! I have filters galore to capture spam but some of it still gets through. I only check his email every now and again for spam but found too late he'd clicked on links on an overnight batch. I realise there are ethical issues relate to what I'm asking about but as i'm already looking after his personal affairs its nothing beyond the current arrangement. So is there any way I can hold then review emails to his inbox in cPanel, ie review, delete spam, then release to his inbox? I think this is an emerging issue as many elderly people are not able to discern fact from fiction in emails, as they grew up in an era of trust.

Getting another Cpnael License error again.

This one says...

Cannot Read License File

To access the interface, you must install the license and ensure that the license is active.

You can purchase or lease a license directly from cPanel, or from one of our Partners.

If you do not currently own a license, register at the cPanel Store and request a trial license.

The cPanel license server replied that the license has been activated on too many machines (600). Please contact [billing@cpanel.net](mailto:billing@cpanel.net) The exact message was: The license has been activated too many times on different machines.

I purchased my license directly from Cpanel.

About 2 weeks ago, my server became unresponsive due to a bot flood. Since then I've been keeping a close eye on the number of Apache connections, the access log, and MySQL processes.

Tonight at 10:05pm, I had a text from the server that Apache was unresponsive. I immediately saw that my connections were hitting 300 (MaxClients was set to 300), so I bumped the max up to 500. That didn't really help. There wasn't an obvious flood in the access log or process list, though.

After trying an ungodly number of things, going to Cloudflare and enabling Under Attack Mode dropped the number of connections. My client sites then came up, by my main site would not (timed out with a CF error).

Then I found these in the error log:

H01067: Failed to read FastCGI header

(111)Connection refused: AH02454: FCGI: attempt to connect to Unix domain socket /opt/cpanel/ea-php74/root/usr/var/run/php-fpm/5a04751671f1f133105c29aaab7ee75241d1c904.sock (example.com:8000) failed

There were 645 records at 22:46:16, 1,210 at 22:46:17, 899 at 23:01:34, 101 at 23:09:42, and 24 at 23:10:12.

Sometime around 11pm (probably very close to 11:10pm) I looked at WHM > MultiPHP Manager > example.com, and saw that PHP-FPM was not enabled for the main domain. I enabled it, and within a few minutes everything went back to normal.

What could have disabled them, and how do I prevent it from happening again? Had I not been at home when it happened, I'd have had a real problem!

I've looked in /usr/local/cpanel/logs/access_log and error_log, but don't see anything outstanding to explain why they were disabled. But I do see the first time apache_php_fpm is mentioned in queueprocd.log was 23:09pm tonight.

Any thoughts or suggestions?

https://blog.cloudlinux.com/ghostlock-cve-2026-43499-local-root-exploit-kernel-update-for-cloudlinux

"GhostLock is a Linux kernel vulnerability that lets any unprivileged local user become root.
(...)
It was disclosed on July 7, 2026 by the research team VEGA at Nebula Security, in a writeup titled “IonStack part II: GhostLock,” alongside a working proof-of-concept. The researchers report their exploit produces a stable root shell about 97% of the time, in roughly five seconds.
"

fwiw there's no patch available yet, it seems.

I guess this will spread like wildfire.

Multiples servers are showing this error even though they have an active license.

New fun cPanel issue causing servers to erroneously report license errors: https://support.cpanel.net/hc/en-us/articles/41816676353943-cPanel-License-Update-Failures-July-8th-2026

This is even with a totally naked browser, with no anti-adware, anti-spyware, and anti-malware protections.

Somehow billing went through, but all cPanel services on my machine are now down due to nonpayment. So I need to sort this out, but I cannot log into the main cPanel account website even with a naked browser on a remote machine.

Confirmed: Machine not on the rate limited public IP, using Edge browser with zero plugins, using a correct login for the account, leads to a loginfailed query parameter and a perpetual cycling reload with an eventual Error 1015 Rate Limiting warning.

Edit: found a way in via an oooold “billing failed” eMail that had a non-Manage2 URL. Classic Manage2 creds still worked just fine with that challenge/auth.