News & Blog
The latest from the UnderHost blog and our service announcements.
Blog
Node.js Security Update (October 2026): CVE-2026-111497
On 21 October 2026, the Node.js project released security updates for its 22.x, 24.x and 26.x lines: Node.js 22.23.4, 24.22.1 and 26.12.1. They fix 10 vulnerabilities, and the highest severity is High. The most serious,…
Read on the blog
Blog
PHP Critical Security Update (October 2026): Patch Guide, CloudLinux Status, CERT-EU Advice and Mitigations
PHP has announced two critical security vulnerabilities, rated CVSS v4.0 9.2, with a release on 21 October 2026. Here is how to check your PHP version and patch cPanel and non-panel servers.
Read on the blog
Blog
cPanel Price Increase 2027: New UnderHost Pricing
cPanel adjusts its license pricing every year. Here are UnderHost’s updated monthly prices for cPanel Admin, Pro, Plus, and Premier from January 1, 2027, what is not changing, and the options available if you would rath…
Read on the blog
Blog
Install EmDash CMS on cPanel and Shared Hosting (2026)
A step-by-step install guide for EmDash CMS on three targets: a cPanel server, UnderHost shared hosting without SSH, and a Linux server without a panel. Covers Node.js 22.16+, build steps, environment variables, checks,…
Read on the blog
Blog
GhostLock and Januscape: What Self-Managed Linux Server Owners Need to Patch Now
Two high-severity Linux kernel vulnerabilities, GhostLock and Januscape, allow local root escalation and VM escape across most major distributions. Here’s what they do, how to patch a self-managed server, and confirmati…
Read on the blog
Blog
10Gbps Dedicated Servers Explained: Who Needs That Much Bandwidth?
Learn when a 10Gbps dedicated server is worth it, which projects benefit most from high-bandwidth hosting, and how UnderHost helps businesses deploy fast, powerful, and scalable dedicated infrastructure.
Read on the blog
Blog
Welcome to the New UnderHost: A Faster, Cleaner, Privacy-First Hosting Experience
UnderHost has launched its redesigned website and updated brand identity, including a refreshed logo system, new media kit, clearer service pages, and a stronger focus on independent hosting, privacy-conscious infrastru…
Read on the blog
Blog
CVE-2026-31431 ‘Copy Fail’: Why Linux Server Owners Should Patch Now
Security advisories are rolling out for CVE-2026-31431, a Linux kernel vulnerability that can allow local privilege escalation. Here’s what server owners need to know, how to check for exposure, and how UnderHost’s Unde…
Read on the blog
Blog
Critical cPanel Authentication Bypass – Patch Now (CVE-2026-41940)
Critical severity – Authentication bypass in cPanel & WHM (CVE-2026-41940). All versions after 11.40 are vulnerable unless patched. UnderHost provides patched version numbers, firewall mitigations, a detection script, a…
Read on the blog