Blog & News
Latest updates, feature announcements, and security news from Panelica.
Brotli CVE-2026-111497: Is Your PHP Server Affected? Fixes by Distro
CVE-2026-111497 is a critical Brotli decoder bug (CVSS 9.2). PHP rebuilt only its Windows builds; Linux needs the distro fix. Who is affected and how to patch.
Read MorePHP2Shell Explained: Root Cause, Fixed Versions and PHP 8.1 Patch
PHP2Shell (CVE-2026-109618, CVE-2026-109619) lets attackers run code through PHP. What caused it, who is affected, and patched PHP 8.1 to 8.5 for Panelica.
Read MoreAI Agent Permissions for Server Management: How Panelica's Scoped API Keys, HMAC Signing and Rate Limits Keep an Assistant Safe
Panelica's 50 scoped API permissions, HMAC-SHA256 signing, IP whitelisting, expiry and rate limits keep an AI assistant inside the access it was granted.
Read MoreCVE-2026-67401: The cPanel EmailTrack SQL Injection That Lets a Mail Account Reach Root
cPanel's September 8, 2026 advisory: a CVSS 9.9 SQL injection in EmailTrack lets any authenticated mail-enabled account escalate to root. Affected versions, patch steps, and how to check for compromise.
Read MoreIs It Safe to Give an AI Access to Your Server? Scoped API Keys Explained
Scoped API keys, HMAC-signed requests and read-only/mutating/destructive tool labels are what make AI access to a Panelica server safe by design.
Read MoreVMware vCenter/ESXi Critical Vulnerabilities (2026): What Hosting Providers Must Do Now
Broadcom disclosed three critical vCenter/ESXi flaws (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876) with no workarounds. Here is what happened, why hosting providers are the top target, and how to respond.
Read MoreCan Other Users See My Files on Shared Hosting? Here Is the Real Answer
A hands-on answer to the question every shared hosting customer eventually asks, with three commands you can run yourself and a look at how Panelica isolates every account by default.
Read MorePrivilege Escalation in Hosting Panels: What the July 2026 CyberPanel Flaw Teaches Us About Server Isolation
An unpatched privilege-escalation flaw hit CyberPanel in July 2026. Here is how the vulnerability class works, and how real server isolation limits the damage.
Read MoreIs Docker Alone Safe for Multi-Tenant Hosting? The Honest Answer
No - one shared kernel means one container escape reaches every tenant. Why Docker is not a trust boundary for untrusted tenants, and what real isolation adds.
Read MoreA Disposable Browser for Risky Links: Remote Browser Isolation with Docker
Open untrusted links in a browser that runs on a server and streams to your screen. How remote browser isolation protects your device - and what it does not.
Read MoreKali Linux in Your Browser: A Disposable Security Lab in Minutes
Run Kali or ParrotOS as a browser-based Docker container: a full pentest desktop you create, use, and destroy - isolated from your machine. Authorized use only.
Read MoreInside Panelica's Mail Protection Stack: Every Layer That Keeps Your Email Clean and Delivered
A complete, no-marketing tour of how Panelica protects email -- SPF, DKIM, DMARC, Postscreen, SpamAssassin, DANE, MTA-STS and outbound rate limiting -- explained layer by layer, with the real panel screens drawn step by step.
Read More