H4Y Technologies: iWebFusion and iCloudFusion

H4Y Technologies: iWebFusion and iCloudFusion H4Y Technologies LLC (Formerly Host for Yourself LLC) was founded in 2001. In 2009, H4Y acquired iW

Whether you want a professionally designed site, or you want to learn to do it yourself with the assistance of our highly experienced professionals, we can help. Whether you run your own server in-house, or you want a fully managed hosting plan, we can help. Whether you need a hosting plan with an abundance of features and a low price, or top-notch security and reliability, we can help. Whether yo

u want to be your own webhosting reseller, or you are a designer looking to host your own clients, we can help. At H4Y Technologies, we know that we can show you how to accomplish your online goals in the exact way you need, with the lowest prices in the industry, and with a level of quality and support far beyond what you could ever expect.

ATTENTION: New Security Alert involving ConfigServer Firewall 🔒🛡
08/07/2026

ATTENTION: New Security Alert involving ConfigServer Firewall

🔒🛡

SituationMultiple vulnerabilities were found in the ConfigServer Firewall plugin. Affected Product Versions Product Affected Versions Patched Versions CSF 16.20-1 and earlier 16.30-1 ImpactE...

04/30/2026

What a month it has been!

🔐 SECURITY ALERT | Important Update for All H4Y Clients

We're reaching out to keep you informed about two critical vulnerabilities currently being actively exploited in the wild that affect cPanel/WHM and Linux-based servers — including CloudLinux.

⚠️ What's happening?

1️⃣ CVE-2026-41940 – cPanel/WHM Authentication Bypass (CVSS 9.8 – Critical)
A serious flaw in cPanel allows attackers to bypass login entirely and gain root-level access to a server — without a password. It affects all cPanel/WHM versions after v11.40 and has been actively exploited since at least February 2026. Ransomware attacks encrypting files with a ".sorry" extension have already been reported across thousands of servers globally.

2️⃣ CVE-2026-31431 – Linux Kernel "Copy Fail" Privilege Escalation
A 9-year-old flaw in the Linux kernel (affecting every major distro since 2017, including CloudLinux) allows someone already on a server to escalate their privileges to root. A working public exploit is available.

Additionally, cPanel pre-disclosed three NEW CVEs today (CVE-2026-29201, 29202, 29203) with patches releasing today, May 8.

---

✅ FOR MANAGED CLIENTS:
You're in good hands — our team is actively monitoring the situation and applying patches across internal servers. We are relying upon automated updates for managed servers but please contact us if you want us to give immediate special attention to your host.

---

🔧 FOR SELF-MANAGED CLIENTS — Action Required:
Please take the following steps as soon as possible:

▶ Patch cPanel/WHM immediately:
SSH into your server and run: /scripts/upcp
Confirm you're on the latest patched build by running: /usr/local/cpanel/cpanel -V

▶ Patch your Linux Kernel (fixes Copy Fail):
Run: yum update kernel (CloudLinux/AlmaLinux/CentOS)
or: apt update && apt upgrade (Debian/Ubuntu)
Then reboot your server to load the new kernel.

▶ For new cPanel CVEs (29201/29202/29203):
Run /scripts/upcp after 12:00 PM EST today (May 8) to pull the latest Technical Support Release.

▶ Check for signs of compromise:
Look for files renamed with a .sorry extension, unexpected cron jobs, new SSH keys, or unknown user accounts.

▶ Verify your backups are intact and offsite.

---

📩 Questions or need help? Open a support ticket or reach out to us directly — we're here for you.

Stay safe out there. 🛡️
— The H4Y Team

Address

333 Island Drive
Melbourne Beach, FL
32951

Telephone

+18664355642

Website

Alerts

Be the first to know and let us send you an email when H4Y Technologies: iWebFusion and iCloudFusion posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to H4Y Technologies: iWebFusion and iCloudFusion:

Shortcuts

Share