Sileep Kumar, Author at Ezeelogin Blog | SSH Security, PAM & Linux Server Management https://www.ezeelogin.com/blog/author/sileep/ Expert articles on SSH jump servers, bastion hosts, SSH key management, PAM, RBAC, and Linux security. Practical guides from the Ezeelogin team. Wed, 04 Nov 2026 10:05:59 +0000 en-US hourly 1 https://wordpress.org/?v=7.1.4 PHP2Shell: Patch CVE-2026-109618 & CVE-2026-109619 https://www.ezeelogin.com/blog/php2shell-two-critical-php-flaws-and-how-to-patch-them/ Tue, 27 Oct 2026 12:17:02 +0000 https://www.ezeelogin.com/blog/?p=2882 PHP2Shell: Two Critical PHP Flaws That Turn One HTTP Request into Code Execution PHP2Shell is a critical PHP remote code execution vulnerability pair, tracked as CVE-2026-109618 and CVE-2026-109619. On 21 October 2026 the PHP project shipped emergency releases for both flaws in the language runtime itself. Each is rated 9.2 (Critical) on CVSS v4.0, and

The post PHP2Shell: Patch CVE-2026-109618 & CVE-2026-109619 appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> CVE-2026-41940: How a Misplaced CRLF Hands Attackers the Keys to Millions of Hosted Websites https://www.ezeelogin.com/blog/cve-2026-41940-how-a-misplaced-crlf-hands-attackers-the-keys-to-millions-of-hosted-websites/ Thu, 14 May 2026 07:45:05 +0000 https://www.ezeelogin.com/blog/?p=2697 What Is CVE-2026-41940? CVE-2026-41940 is a critical pre-authentication remote authentication bypass affecting cPanel & WHM and WP Squared — the control panel software that quietly powers an estimated 70 million domains and 94% of the web hosting control panel market. The root cause is a CRLF injection flaw in the way cPanel’s service daemon (cpsrvd)

The post CVE-2026-41940: How a Misplaced CRLF Hands Attackers the Keys to Millions of Hosted Websites appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> OpenSSH GSSAPI Flaw (CVE-2026-3497) https://www.ezeelogin.com/blog/openssh-gssapi-flaw-cve-2026-3497/ Fri, 20 Mar 2026 04:29:03 +0000 https://www.ezeelogin.com/blog/?p=2629 OpenSSH GSSAPI Flaw (CVE-2026-3497): When a Small SSH Bug Creates Bigger Security Risks OpenSSH is one of those pieces of software most administrators rarely think about until something goes wrong. It sits quietly in the background, powering remote administration, file transfers, Git operations, automation pipelines, and countless production workflows across Linux and Unix systems. That

The post OpenSSH GSSAPI Flaw (CVE-2026-3497) appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> Plague: The PAM-Based Linux Backdoor https://www.ezeelogin.com/blog/plague-the-pam-based-linux-backdoor/ Thu, 19 Feb 2026 09:48:14 +0000 https://www.ezeelogin.com/blog/?p=1964 Plague is a newly discovered, highly sophisticated Linux backdoor making headlines across the cybersecurity community. Unlike conventional malware, Plague embeds itself into PAM (Pluggable Authentication Modules)—the core authentication framework for Linux—granting attackers stealthy, persistent access that bypasses standard login mechanisms. Researchers warn that Plague has been quietly evolving since mid-2024 and remained undetected for more than

The post Plague: The PAM-Based Linux Backdoor appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> CVE-2025-61984 — OpenSSH command injection vulnerability https://www.ezeelogin.com/blog/cve-2025-61984-openssh-client-command-injection-vulnerability/ Tue, 28 Oct 2025 12:41:41 +0000 https://www.ezeelogin.com/blog/?p=2042 CVE-2025-61984 is a newly discovered OpenSSH client command injection vulnerability that affects OpenSSH client versions prior to 10.1. This article focuses on what CVE-2025-61984 is, the root cause of the vulnerability, and how to mitigate it. Root cause of CVE-2025-61984 OpenSSH includes a ProxyCommand option in its ssh_config file, which allows administrators to run an

The post CVE-2025-61984 — OpenSSH command injection vulnerability appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]>