{"id":4914,"date":"2024-10-30T11:04:30","date_gmt":"2024-10-30T15:04:30","guid":{"rendered":"https:\/\/hostingdiscussion.com\/news\/?p=4914"},"modified":"2024-10-30T11:04:30","modified_gmt":"2024-10-30T15:04:30","slug":"cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability","status":"publish","type":"post","link":"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/","title":{"rendered":"CyberPanel rushes security patch after crypto-mining malware exploits critical 0-day vulnerability"},"content":{"rendered":"<p>Today, on the WebHostingTalk.com forums, a user named \u201cmobin\u201d raised concerns about a severe CyberPanel issue, which immediately caught the attention of the online community. Mobin reported an alarming CPU spike on their server, which they traced back to crypto-mining malware operating with root-level permissions.<\/p>\n<p>They suggested that this malware exploited a vulnerability within CyberPanel\u2019s control panel daemon to gain unauthorized access. Consequently, this revelation sent shockwaves through CyberPanel users, many of whom began worrying about similar vulnerabilities.<\/p>\n<p>Meanwhile, cybersecurity researcher DreyAnd responded with an analysis on their blog. They identified this issue as a 0-day vulnerability, allowing attackers to remotely execute code on CyberPanel systems without any authentication. DreyAnd described it as a \u201cpre-auth RCE with root privileges,\u201d giving attackers full control of affected systems. For those relying on CyberPanel for business-critical applications, the news highlighted serious security risks.<\/p>\n<p>Additionally, more users shared issues on CyberPanel\u2019s official forum, reporting blocked access, random 404 errors, and unexplained CPU spikes. Many users identified a process named \u2018\/var\/tmp\/kdevtmpfsi\u2019 linked to the malware. One user, \u201ckktsks,\u201d described their servers as \u201ccrippled\u201d due to the exploit, leaving them unable to perform vital tasks.<\/p>\n<p>In response, CyberPanel quickly released an official statement confirming the vulnerability and describing their response. Within 30 minutes of verifying the issue, they deployed a security patch. Initially, CyberPanel refrained from publicizing the patch to prevent attackers from targeting unprotected systems. To ensure users\u2019 safety, they urged everyone to update the software promptly.<\/p>\n<p>Furthermore, CyberPanel provided detailed instructions and support options for users facing restricted SSH access. This prompt response emphasized the importance of timely security updates and transparent communication when handling security risks. Now, with the patch available, the CyberPanel community is focused on securing their systems, while developers work to improve communication and support.<\/p>\n<p>Ultimately, this incident underscores the need for swift action and vigilant security practices in today\u2019s digital world. CyberPanel\u2019s rapid response has reassured many users, yet it also serves as a potent reminder of the persistent threats facing web infrastructure today.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Today, on the WebHostingTalk.com forums, a user named \u201cmobin\u201d raised concerns about a severe CyberPanel issue, which immediately caught the attention of the online community. Mobin reported an alarming CPU spike on their server, which they traced back to crypto-mining malware operating with root-level permissions. They suggested that this malware exploited a vulnerability within CyberPanel\u2019s [&hellip;]<\/p>\n","protected":false},"author":20624,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[2659,2658,80,125,2660],"class_list":["post-4914","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-crypto-mining-malware","tag-cyberpanel","tag-cybersecurity","tag-web","tag-webhostingtalk-com"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>CyberPanel rushes security patch after crypto-mining malware exploits critical 0-day vulnerability - Web Hosting News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CyberPanel rushes security patch after crypto-mining malware exploits critical 0-day vulnerability - Web Hosting News\" \/>\n<meta property=\"og:description\" content=\"Today, on the WebHostingTalk.com forums, a user named \u201cmobin\u201d raised concerns about a severe CyberPanel issue, which immediately caught the attention of the online community. Mobin reported an alarming CPU spike on their server, which they traced back to crypto-mining malware operating with root-level permissions. They suggested that this malware exploited a vulnerability within CyberPanel\u2019s [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/\" \/>\n<meta property=\"og:site_name\" content=\"Web Hosting News\" \/>\n<meta property=\"article:published_time\" content=\"2024-10-30T15:04:30+00:00\" \/>\n<meta name=\"author\" content=\"Justine Juyad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Justine Juyad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/\",\"name\":\"CyberPanel rushes security patch after crypto-mining malware exploits critical 0-day vulnerability - Web Hosting News\",\"isPartOf\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\"},\"datePublished\":\"2024-10-30T15:04:30+00:00\",\"dateModified\":\"2024-10-30T15:04:30+00:00\",\"author\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\"},\"breadcrumb\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hostingdiscussion.com\/news\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CyberPanel rushes security patch after crypto-mining malware exploits critical 0-day vulnerability\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/\",\"name\":\"Web Hosting News\",\"description\":\"Cloud and web hosting industry daily news\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\",\"name\":\"Justine Juyad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"caption\":\"Justine Juyad\"},\"description\":\"HostingDiscussion.com senior reporter\",\"sameAs\":[\"https:\/\/hostingdiscussion.com\/news\/\"],\"url\":\"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CyberPanel rushes security patch after crypto-mining malware exploits critical 0-day vulnerability - Web Hosting News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/","og_locale":"en_US","og_type":"article","og_title":"CyberPanel rushes security patch after crypto-mining malware exploits critical 0-day vulnerability - Web Hosting News","og_description":"Today, on the WebHostingTalk.com forums, a user named \u201cmobin\u201d raised concerns about a severe CyberPanel issue, which immediately caught the attention of the online community. Mobin reported an alarming CPU spike on their server, which they traced back to crypto-mining malware operating with root-level permissions. They suggested that this malware exploited a vulnerability within CyberPanel\u2019s [&hellip;]","og_url":"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/","og_site_name":"Web Hosting News","article_published_time":"2024-10-30T15:04:30+00:00","author":"Justine Juyad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Justine Juyad","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/","url":"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/","name":"CyberPanel rushes security patch after crypto-mining malware exploits critical 0-day vulnerability - Web Hosting News","isPartOf":{"@id":"https:\/\/hostingdiscussion.com\/news\/#website"},"datePublished":"2024-10-30T15:04:30+00:00","dateModified":"2024-10-30T15:04:30+00:00","author":{"@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3"},"breadcrumb":{"@id":"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/hostingdiscussion.com\/news\/cyberpanel-rushes-security-patch-after-crypto-mining-malware-exploits-critical-0-day-vulnerability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hostingdiscussion.com\/news\/"},{"@type":"ListItem","position":2,"name":"CyberPanel rushes security patch after crypto-mining malware exploits critical 0-day vulnerability"}]},{"@type":"WebSite","@id":"https:\/\/hostingdiscussion.com\/news\/#website","url":"https:\/\/hostingdiscussion.com\/news\/","name":"Web Hosting News","description":"Cloud and web hosting industry daily news","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3","name":"Justine Juyad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","caption":"Justine Juyad"},"description":"HostingDiscussion.com senior reporter","sameAs":["https:\/\/hostingdiscussion.com\/news\/"],"url":"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/"}]}},"views":447,"_links":{"self":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/4914","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/users\/20624"}],"replies":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/comments?post=4914"}],"version-history":[{"count":1,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/4914\/revisions"}],"predecessor-version":[{"id":4915,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/4914\/revisions\/4915"}],"wp:attachment":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/media?parent=4914"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/categories?post=4914"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/tags?post=4914"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}