Security Advisory: Multiple Critical Vulnerabiliities affecting VMware ESX and vCenter

This advisory is provided as a courtesy. We would like to bring to your attention multiple critical vulnerabilities in Broadcom VMware ESX and vCenter products. Attackers can exploit multiple vulnerabilities in the VMware products to bypass authentication, execute arbitrary code, access sensitive information or cause denial-of-service. We recommend customers running VMware ESX and vCenter ...

Security Advisory: New High Severity Vulnerabilities in WHM/cPanel

First posted on Thursday, 30 July 2026 This advisory is provided as a courtesy. We want to bring to your attention some vulnerabilities across versions of WHM/cPanel. HTTP Request Smuggling (CVE-2026-58047) Database Privilege Escalation (CVE-2026-58048) Exim .forward Privilege Escalation (GCVE-25-2026-07-45-3) Affected Software Plesk - All WHM/cPanel versions before the ...

Security Advisory: New Blind SQL Injection Vulnerability in Plesk's XML-RPC API

First posted on Tuesday, 28 July 2026 This advisory is provided as a courtesy. We want to bring to your attention a newly discovered vulnerability in all versions of Plesk hosting control panel. The security vulnerability allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database through Plesk's XML-RPC API. Impact: An ...