Vulnerabilities

TI-2025-40385 CVE-2025-65530 · GHSA-v455-wrvf-mv55

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before…

MEDIUM 40

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2025-12-12 No fix listed CWE-95

TI-2020-18940 CVE-2020-36772 · GHSA-xcjc-c88c-v52w

CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the…

MEDIUM 54

CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command.

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00378 Published 2024-01-22 Fixed in 7.1.1-1 CWE-73

TI-2020-18939 CVE-2020-36771 · GHSA-v7gp-f4wc-h5w4

Information disclosure in Cloudlinux OS cagefs

LOW 37

CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00474 Published 2024-01-22 Fixed in 7.1.2-2 CWE-214

TI-2021-05001 CVE-2021-21956 · GHSA-q66p-gvmf-c9v2

Deserialization of untrusted data in CloudLinux Inc Imunify360

HIGH 69

A php unserialize vulnerability exists in the Ai-Bolit functionality of CloudLinux Inc Imunify360 5.10.2.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01393 Published 2022-04-14 No fix listed CWE-502

Vulnerabilities

Filters

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before…

CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the…

Information disclosure in Cloudlinux OS cagefs

Deserialization of untrusted data in CloudLinux Inc Imunify360