Post
Suriq - Always on Watch
suriq.io
did:plc:6vjp7fbgz5ductueireifliv
⚠️ PATCH NOW
WHMCS, the billing platform many hosting firms run, has a critical flaw (CVE-2026-67399): a stranger with no login can run code on the server.
Affects 9.x before 9.0.8 and 8.x before 8.13.7. No workaround.
Patch now.
https://suriq.io/blog/whmcs-unauthenticated-rce-cve-2026-67399-patch
2026-09-03T18:18:59.972Z