New Year discount limited time 25% off on our life-time plans using code: LMT25
Try our free employee tracking app! Sign up now – click here
  • 00Days
  • 00Hours
  • 00Minutes
  • 00Seconds
Login
Get Started Free

Change Logs

    See All Results
      See All Results
      < All Topics
      Print

      Change Logs

      Posted
      Updated
      Byadmin

      v3.0.0 – Ubuntu 26, Backup Reliability & Security

      Dated: 9th August 2026

      Build: 0

      —

      CyberPanel 3.0.0 adds Ubuntu 26.04 installation and upgrade support, strengthens full and incremental backup restoration, consolidates release versioning, and ships the security and reliability fixes validated across Ubuntu 22.04, 24.04 and 26.04.

      PLATFORM SUPPORT

      • Added Ubuntu 26.04 installation and upgrade support with a Python 3.12 panel runtime, distribution MariaDB packages, available mail-scanning packages, reliable DNS handoff and compatible Memcached fallback behavior.
      • Package operations now wait for package-manager locks, DNS readiness is verified before downloads, and Ubuntu 26 installer sessions remain available while long-running setup steps complete.

      BACKUP & RESTORE

      • Backup archives are accepted only after they are complete, stable and structurally valid.
      • Version 3 backups use the modern multi-user database metadata restore path while established legacy backup boundaries remain supported.
      • Restores preserve whether the original website had an automatic mail child domain instead of always creating one.
      • Legacy Restic snapshot IDs are retained correctly even when the command finishes with a warning; file, database and scheduled incremental restores were exercised end to end.
      • V2 local Rustic backups now work without an Rclone remote, and database restores verify both the Rustic and MySQL process results instead of returning false success.
      • Full archives omit local incremental repository directories, preventing nested backups and uncontrolled archive growth.

      SECURITY & RELIABILITY

      • Backup restoration rejects path traversal, escaping links, special filesystem entries and writes through unsafe destination symlinks before extraction.
      • V2 backup diagnostics no longer record repository tokens or database passwords.
      • Child-domain deletion now removes the dedicated certificate and exact-domain ACME state safely.
      • Web Terminal authentication, token validation, secret-file permissions and temporary authorized-key handling were hardened.
      • Generated website configurations block sensitive application files, including environment files and repository metadata.
      • Domain aliases, free WordPress navigation, Pure-FTPd reset behavior, PHP 8.5 parsing and DNS SOA serial updates were repaired.

      RELEASE VERSIONING

      • Runtime, API, installer, upgrade, backup and CLI version values now use one release source for v3.0.0.
      • Installer and upgrade scripts parse machine-readable version metadata without fixed byte offsets and support multi-digit build numbers.
      • Fresh installations write the JSON format expected by the CyberPanel CLI, and upgrades synchronize the database-backed API version.

      VALIDATION

      Clean installations and browser workflows were validated on Ubuntu 22.04, 24.04 and 26.04. On Ubuntu 26, the release was exercised through panel login, website creation, WordPress installation, SSL, CyberSMTP, full backup deletion and restoration, scheduled backups, legacy incremental backups and V2 local backups.

      Before upgrading a production server, take a provider snapshot or verified full backup and schedule a maintenance window.

      —

      v2.4.9 – Security & Reliability Maintenance Release

      Dated: 23rd July 2026

      Build: 9

      —

      A maintenance release: a broad batch of security, SSL, backup/restore and upgrade-reliability fixes, plus the updated CyberPanel-OLS web-server stack. Most items were already shipped on the v2.4.8 branch and are consolidated here. No UI changes — safe to upgrade.

      SECURITY

      – Backup IDOR fixed: backup cancellation performed no ownership check, letting any authenticated user kill, delete and corrupt another tenant’s backups as root; the incremental-backup endpoints (delete / fetch restore points / restore) could act on another tenant’s snapshots. Both are now strictly ownership-scoped (#1829, #1828).

      – Hardened command and cron handling, confined per-site PHP tuning to the user’s own pool file, and the 2FA secret now rotates when two-factor is disabled.

      – Fixed command-injection, SQL-injection, path-traversal, privilege-escalation and cryptographic weaknesses across several endpoints.

      – Added authentication to previously-unauthenticated git-webhook, AWS-backup and AI Scanner file-access endpoints (#1806).

      – A strong SnappyMail admin password is generated at install time.

      – Certificate files with trailing binary data no longer break SSL status display or block SSL self-repair (#1847).

      SSL

      – Renewals now actually apply: the renewed certificate is copied into /etc/letsencrypt/live/<domain> and LiteSpeed is reloaded, and acme.sh auto-renewals self-apply — fixes sites silently stuck on an old (expiring) certificate (#1676).

      – Manual “Issue SSL” forces a reissue instead of silently doing nothing (#1814).

      BACKUPS & RESTORE

      – Restored/migrated files are reliably re-owned by the domain user — fixes WordPress asking for FTP credentials after a restore (#1735).

      – A website backup now fails loudly instead of silently producing an archive with no SQL dump when the database export fails (#1823).

      DOMAIN ALIASES

      – Alias creation, listing, SSL issuance and delete now work end-to-end, and orphaned aliases can be cleaned up (#1738).

      UPGRADE & INSTALL

      – The upgrade script no longer mistakes a healthy install for a corrupt one and triggers a destructive recovery re-clone (#1720).

      – Upgrade scripts validate downloads before executing them, with clear errors and automatic retries when GitHub rate-limits (HTTP 429) (#1835).

      – PHP 8.5 no longer crashes the subdomain list; PHP version mapping is future-proofed (#1726).

      – OWASP CRS installs from the canonical GitHub URL (#1715).

      OTHER FIXES

      – Apache no longer returns 503 after an upgrade when mod_ssl re-added Listen 443 while LiteSpeed owns the port.

      – Fixed the remote-transfer regression (status stuck on “Just started..” and silently dropped transfers).

      – secMiddleware no longer blocks valid webmail content (#1813).

      – Re-linked Modify Website and owner transfer in the new UI (#1816); restored the Delete/Suspend website and Delete database actions (#1800).

      – Repaired the dashboard for non-admin users (#1808) and dark mode across the panel (#1804).

      – A blank password field no longer wipes a user’s password on edit (#1811).

      CYBERPANEL-OLS STACK UPDATE

      – Upgraded the custom OpenLiteSpeed stack: core 2.5.1, cyberpanel_ols module 2.7.5, mod_security 2.5.1.

      – Fixes the 4xx segfault / Cloudflare 520 storm: module versions 2.7.0–2.7.3 crashed the OLS worker on requests whose Host matched no vhost (bot probes), causing random 520 errors across all sites on the server.

      – All stack artifacts are verified against pinned SHA256 checksums before install, with automatic rollback to the previous binaries on any mismatch.

      – Note for affected servers: if support removed the cyberpanel_ols module block as an emergency 520 mitigation, restore it (ls_enabled 1) after this upgrade. ls_enabled 0 is a safe kill-switch only on module 2.7.5 or later; never reinstall modules 2.7.0–2.7.3.

      – Ubuntu 20.04 now skips the custom stack overlay (it requires glibc 2.34+); AlmaLinux/Rocky/RHEL 10 use the el9 artifact.

      v2.4.7 – Dashboard UI/UX Overhaul, Accessibility & Security Hardening

      Dated: 19th May 2026

      Build: 7

      —

      🎨 DASHBOARD UI/UX OVERHAUL

      – Extracted the large inline shell/dashboard CSS into cached static stylesheets (cyberpanel-ui.css, dashboard.css) and fixed cache-busting to track the real application version.

      – Self-hosted the panel logo (no more third-party hot-link).

      – Completed the dark theme so cards, tables, modals, pagination and the activity board switch correctly — not just the shell.

      – Added usage-threshold colors (green/amber/red) to CPU/RAM/Disk bars, loading skeletons, and an error/retry state for system metrics.

      – Replaced the fake “demo data” shown while SSH logins load with a proper skeleton.

      🧭 NAVIGATION & LAYOUT

      – Replaced the three stacked promo banners with a single header notification center (bell + dropdown, per-item dismiss, “dismiss all”); removed the layout shift they caused.

      – Added a sidebar quick-filter search and a breadcrumb / page-context strip.

      – Decluttered the shell: flat sidebar items, quiet section labels, trimmed header; neutralized the palette and lightened chrome for a cleaner look.

      – Insight cards are now real links to their list pages.

      ♿ ACCESSIBILITY & I18N

      – Semantic landmarks, visible focus styles, ARIA tablist, skip link, reduced-motion support, SSH-activity modal focus trap + Esc-to-close.

      – Full translation pass over the dashboard strings.

      ⚡ PERFORMANCE

      – Deferred all external scripts (Angular bootstrap order preserved) to cut render-blocking on every page.

      🔒 SECURITY HARDENING

      – Stopped logging admin passwords on login: removed debug output in verifyLogin that wrote plaintext passwords to stderr, and dropped JSON-decode error logging of raw request bodies that could contain the same credentials.

      – Tightened API authorization checks across the API and Cloud API endpoints.

      – Hardened input validation and security utilities across the API, Cloud API, database manager, file manager and website endpoints.

      – Additional security fixes to the backup manager, file manager and remote backup paths.

      🛠️ OTHER

      – Standardized UI feedback helpers (cpToast, cpBusy).

      – Responsive dashboard tables on small screens.

       

      v2.4.5 – Integrated Webmail, Sieve Filtering & Email Delivery

      Dated: 6th March 2026

      Total Commits: 179 commits

      Development Period: September 2nd, 2025 – March 6th, 2026

      —

      ✨ MAJOR NEW FEATURES

      1. Integrated Webmail Client with SSO

      – Scope: Full-featured Django webmail replacing SnappyMail dependency

      – SSO: Dovecot master user authentication — seamless login from CyberPanel

      – Features: Compose, reply, forward, contacts, account switcher, IMAP SORT for date ordering

      – Security: XSS sanitization, SSRF protection, command injection hardening

      – Commits: 14 webmail-related commits

      2. Sieve Email Filtering

      – Scope: Server-side email filtering rules via ManageSieve protocol

      – Features: Folder dropdown in rules UI, INBOX namespace prefix handling, mailbox autocreate

      – Install/Upgrade: Enabled automatically on all supported operating systems

      – Commits: 3 Sieve-specific commits

      3. CyberMail Email Delivery Integration

      – Scope: New emailDelivery app for transactional email sending via CyberMail

      – Features: DNS record auto-configuration, relay setup, dashboard integration

      – Rendering: Uses httpProc for proper sidebar and context data display

      4. Advanced Email Filtering

      – Catch-All: Receive emails for any address on a domain

      – Plus-Addressing: Automatic sub-address routing ([email protected])

      – Pattern Forwarding: Rule-based email forwarding with pattern matching

      – Database: Uses raw SQL via upgrade.py for backward compatibility

      5. Resource Limits (cgroups)

      – Scope: Per-website CPU, memory, and I/O limits via OpenLiteSpeed cgroups

      – Features: Automatic cgroups v2 setup, resource limits display on website detail page, RHEL 8 cgroups v2 detection

      – Access: Available for addon users only

      – Commits: 9 resource limits commits

      6. Custom OpenLiteSpeed Binary with .htaccess Support

      – Scope: Custom OLS binaries with native .htaccess PHP configuration support

      – Platform Binaries: Ubuntu, RHEL 8, RHEL 9 with SHA256 checksum verification

      – Auto-SSL: Built-in Auto-SSL support with config injection during install/upgrade

      – Brute Force: Phase 2 brute force protection with progressive throttle (OLS module v2.2.0)

      – OLS Test Suite: 128 automated tests covering SSL, Apache config, and protocol compliance

      – SIGSEGV Fix: Fixed NULL pointer dereference in OLS error responses

      – Commits: 20+ OLS binary and module commits

      —

      ? SECURITY FIXES

      1. Fix critical webmail vulnerabilities: XSS, SSRF, path traversal, command injection (632dc3fb, 28113d97)
      2. Implement comprehensive security for Docker container command execution (b05d9cb5)
      3. Security hardening for emailDelivery app (28113d97)
      4. Fix security middleware to allow file content in API endpoints (e65109fe)
      5. Enhance security by adding rel=”noopener” to external links (97fd4e05)
      6. Enhance environment variable management and security (7bd66f7f)
      7. General security fixes (eca0c3cb)

      —

      ? INFRASTRUCTURE IMPROVEMENTS

      One-Click Backup Overhaul

      1. Enhanced database backup with compression support and backward compatibility
      2. Multi-method backup verification with improved reliability
      3. Storage stats, last backup info, and error logs on ManageOCBackups page
      4. Fixed critical bug in failure notification logic
      5. Fixed backup restore permission error with SFTP fallback
      6. Fixed compressed database backup verification logic

      Docker & N8N

      1. Add container console support and pull image functionality
      2. Fix n8n v1.87.0+ compatibility with OpenLiteSpeed reverse proxy
      3. Fix n8n container health check to use fuzzy name matching
      4. Fix n8n deployment bug
      5. Enhanced environment variable management with advanced mode and import/export

      OWASP ModSecurity

      1. Fix OWASP CRS UI toggle state issues and improve installation reliability
      2. Fix toggle interaction and prevent recursive change events
      3. Add ModSecurity compatibility to custom OLS binaries

      —

      ? BUG FIXES BY CATEGORY

      Email & Mail Server

      1. Fix missing mail TLS certs: copy self-signed certs to /etc/pki/dovecot/ at install and upgrade
      2. Fix dovecot-mysql missing on AlmaLinux 9+: use standard packages instead of gf-plus
      3. Fix webmail SSO setup in install and upgrade
      4. Fix webmail.conf ownership for proper authentication
      5. Fix webmail account switcher: ng-if scope issue, fromAccount API calls, ng-model binding
      6. Fix custom installation: skip email operations when services not installed

      SSL & Certificates

      1. Fix acme.sh not creating domain configurations in /root/.acme.sh/
      2. Fix SSL timeout issues
      3. Fix OLS SSL listener auto-map serving wrong certificates
      4. Fix Auto-SSL config injection appending garbage to acmeEmail line

      Permissions & Access

      1. Fix permission race condition in fixPermissions function
      2. Fix permission issues on Ubuntu 24 causing 404 errors
      3. Fix ACL child domain permission issues for non-admin users

      File Operations & Backup

      1. Fix file operation endpoints to use website externalApp correctly
      2. Fix replace-file API to use temp file approach
      3. Fix backup API executioner return value checks
      4. Fix backup error checking in rename and delete endpoints
      5. Fix downloadFile function to properly parse query parameters (#1643)

      API & Authentication

      1. Fix CyberPanel API key validation for platform callbacks
      2. Fix VPS API key persistence in CyberPanel database
      3. Add X-API-Key header support for AI Scanner file operations
      4. Fix login issues
      5. Fix allowed host issue

      WordPress & CMS

      1. Fix staging site issues (5 commits)
      2. Improve WordPress Manager home design
      3. Fix UX on list WordPress sites page

      System & Platform

      1. Fix PHP manager turning off uploads
      2. Fix Imunify restore after upgrade (7 commits)
      3. Fix dynamic latest version of LSWS server
      4. Fix AlmaLinux 8 installation: add python-dotenv to requirements
      5. Fix MariaDB on AlmaLinux 9
      6. Fix monthly bandwidth for websites
      7. Fix ProcessUtilities import error
      8. Fix subdomain page improvements
      9. Fix Python 3.6 compatibility (2 commits)
      10. Fix mirror Gettoforge

      —

      ? OTHER IMPROVEMENTS

      1. Add AlmaLinux 10 and PHP 8.4/8.5 support
      2. Add Norwegian Bokmål language translation
      3. Add cosmetic context processor for custom CSS
      4. Add backup frequency and retention data to backup controller
      5. Remove pagination from SSH Logins and SSH Logs tables — display all results directly
      6. Add contributing guide link to README
      7. Add better plugin description and new example plugin
      8. Add OpenLiteSpeed Module Developer Guide documentation
      9. Fix all documentation links
      10. Cloud API documentation
      11. Update addon purchase links to cyberpanel.net

      —

      ? GITHUB ISSUES RESOLVED

      1. #1643: Fix downloadFile function to properly parse query parameters
      2. #1493: Resolved
      3. #1682: Community contribution merge
      4. #1636: Community contribution merge

      —

      ? DEPLOYMENT RECOMMENDATIONS

      Pre-Upgrade Checklist:

      1. Snapshot: Take a server snapshot before upgrading
      2. SnappyMail Users: The new integrated webmail replaces SnappyMail — your email accounts will be accessible through the new webmail interface automatically

      Post-Upgrade Validation:

      1. Webmail: Verify webmail SSO login works from CyberPanel dashboard
      2. Sieve: Test email filtering rules from the webmail rules UI
      3. SSL: Verify Auto-SSL configuration is working
      4. Email: Check inbound mail delivery and TLS certs

      —

      v2.4.4 – Ubuntu 24 Support Finally Live

      Dated: 1st September 2025

      Total Commits: 167 commits

      Development Period: June 28th, 2025 – September 1st, 2025

      —

      ? BREAKING CHANGES

      CSF Firewall Support Removal

      – Impact: HIGH – Existing CSF configurations will be lost

      – Reason: CSF is being discontinued on August 31, 2025

      – Migration: Users should migrate to alternative firewall solutions

      – Commits: 1 major commit (`a4791035`)

      – Files Affected: Multiple CSF-related files removed

      —

      ✨ MAJOR NEW FEATURES

      1. Ubuntu 24.04 LTS Full Support

      – Scope: Complete platform support implementation

      – Components: FTP, PHP, LSCPD, SnappyMail, system services

      – Commits: 12 Ubuntu-specific commits

      – Timeline: August 29-31, 2025

      – Key Changes:

      – FTP service configuration for Ubuntu 24

      – Default PHP configuration for LSCPD

      – SnappyMail webmail integration (6 commits)

      – System service compatibility fixes

      2. Comprehensive Dark Mode UI

      – Scope: Complete interface overhaul

      – Coverage: 24 pages/components updated

      – Commits: 24 dark mode commits

      – Timeline: August 5-6, 2025

      3. SSL Status Visibility Enhancement

      – Feature: SSL certificate status in website listings

      – Commits: 2 feature commits

      – Date: August 22, 2025

      – Impact: Improved SSL management visibility

      4. Comprehensive Recovery Mechanism

      – Feature: Automated recovery for damaged installations

      – Target: Upgrade process failures

      – Date: August 23, 2025

      – Impact: Reduces support burden for corrupted upgrades

      —

      ? INFRASTRUCTURE IMPROVEMENTS

      Upgrade System Overhaul

      – Key Improvements:

      – Settings.py preservation during upgrades

      – INSTALLED_APPS maintenance

      – ACL file handling

      – Virtual environment creation fixes (AlmaLinux 9)

      Installation System Refactoring

      – Key Improvements:

      – Code structure improvements

      – Error handling enhancements

      – Ubuntu 24 compatibility

      – AlmaLinux 9 virtual environment fixes

      Security Middleware Updates

      – Key Improvements:

      – Security hardening

      – Authentication improvements

      – Middleware compatibility updates

      —

      ? BUG FIXES BY CATEGORY

      Email & Mail Server (12+ fixes)

      – Postfix IPv6 Configuration:`70c44d05`

      – SnappyMail Ubuntu 24: 6 commits (August 31, 2025)

      – Postfix/Dovecot Alma9: `be3c6612`

      – PHP Mail Integration: `35fba20a`

      – Email Account Creation: GitHub issue #1468

      WordPress & CMS (8+ fixes)

      – WordPress Installation: `0704e97f`

      – WP Site Home Dark Mode:** 3 commits

      – Mautic Integration: Installation guide added

      Cloud & External Services (4+ fixes)

      – Cloudflare Proxy: Enable/disable functionality (`b4ee0f17`)

      – SFTP Remote Backup: Destination compatibility

      – Server-to-Server Transfer: Connection fixes

      UI/UX & Frontend (15+ fixes)

      – Font Issues: 4 commits (August 29-30, 2025)

      – Arabic Character Support: 4 commits

      – Select Box Issues: Multiple Apache page fixes

      – Font Size Issues: PHP config pages

      System Integration (10+ fixes)

      – AlmaLinux 9 Support: Virtual environment creation

      – CSF Issues: Pre-removal fixes

      – FTP Ubuntu 24: `06653ab7`

      – Service Management: Multiple service fixes

      —

      ? GITHUB ISSUES RESOLVED

      High Priority Issues:

      – #1479: Postfix configuration issues (2 commits)

      – #1471: Critical bug fixes (2 commits)

      – #1470: System integration fixes

      – #1468: Email account creation issues

      – #1466: Security-related fixes

      – #1465: Authentication improvements

      – #1464: UI/UX critical fixes (2 commits)

      – #1463: Core functionality fixes

      Medium Priority Issues:

      – #1453, #1452, #1450: Various system improvements

      – #1447: File handling fixes

      – #1028: Performance optimizations

      – #773: Long-standing configuration issues

      —

      ? TECHNICAL IMPACT ASSESSMENT

      Database Changes:

      – Minimal: No major schema changes detected

      – Settings Preservation: Enhanced INSTALLED_APPS handling

      – Upgrade Safety: Improved rollback mechanisms

      —

      ? DEPLOYMENT RECOMMENDATIONS

      Pre-Upgrade Checklist:

      1. CSF Users: Export firewall rules before upgrade

      Post-Upgrade Validation:

      1. Services Check: Verify all services start correctly

      2. UI Testing: Confirm dark mode functionality

      3. Email Testing: Validate mail server functionality

      4. SSL Verification: Check certificate status displays

      Rollback Strategy:

      – Recovery Mechanism: Use built-in recovery for failed upgrades

      – Backup Preservation: Original configurations maintained

      – Version Pinning: Ability to pin to v2.4.3 if needed

      —

      ? COMMUNITY IMPACT

      User Experience Improvements:

      – Dark Mode: Complete UI overhaul for better accessibility

      – SSL Visibility: Enhanced certificate management

      – Ubuntu 24 Support: Extended platform compatibility

      – Recovery Tools: Reduced support ticket volume

      Administrator Benefits:

      – Automated Recovery: Self-healing upgrade process

      – Better Monitoring: SSL status visibility

      – Platform Support: Ubuntu 24 LTS availability

      – Security: Enhanced 2FA options

      —

      ? FUTURE CONSIDERATIONS

      Recommended for Next Release:

      1. CSF Alternative: Native firewall management system

      3. Performance Monitoring: Dark mode impact assessment

      This release represents approximately 2 months of intensive development focusing on platform expansion, user experience improvements, and system reliability enhancements.

      v2.4.2 – Complete Design Overhaul

      Dated: 28th June 2025

      Features:

      1. CyberPanel design has been completed changed and improved.
      2. AI Scanner Integration – https://github.com/usmannasir/cyberpanel/commit/098e6d52
        • Introduced comprehensive AI-powered security scanner for WordPress sites
        • Real-time malware detection and vulnerability assessment
        • Integration with AI analysis for suspicious files
      3. Free AI Scans for VPS Users – https://github.com/usmannasir/cyberpanel/commit/b1715b6a
        • VPS users can now access free AI security scans
        • Automatic detection of VPS environments
        • Streamlined payment integration for free scan allocation
      4. Enhanced File Manager – https://github.com/usmannasir/cyberpanel/commit/b40a55cf
        • Improved file management interface
        • Better performance and user experience
        • Enhanced file operations
      5. Improved Home Page Design – https://github.com/usmannasir/cyberpanel/commit/8518d045
        • Modern, responsive dashboard designBetter visual hierarchy and information displayEnhanced user experience

      Bug Fixes

      1. https://github.com/usmannasir/cyberpanel/issues/1423 – https://github.com/usmannasir/cyberpanel/commit/52a0ea3d
        • Resolved recurring 500 internal server error in admin panel
        • Fixed Django signals module import issue
      2. https://github.com/usmannasir/cyberpanel/issues/1441 – https://github.com/usmannasir/cyberpanel/commit/286a2ffb
        • Fixed API authentication issues
        • Improved third-party integration compatibility
      3. https://github.com/usmannasir/cyberpanel/issues/1442 – https://github.com/usmannasir/cyberpanel/commit/0735860d
        • Disk quotas now automatically update when changing website plans
        • Fixed quota rebuild trigger mechanism
      4. Fix: Select Control Display on Windows – https://github.com/usmannasir/cyberpanel/commit/6ea4a65d
        • Resolved dropdown selection visibility issues on Windows browsers
        • Improved cross-platform form compatibility
      5. Fix: Child Domain Management – https://github.com/usmannasir/cyberpanel/commit/0abdfaae
        • Fixed child domain deletion issues
        • Improved child domain launcher functionality
      6. Fix: Staging Environment – https://github.com/usmannasir/cyberpanel/commit/f17092c1
        • Enhanced backend stability for staging creation
        • Fixed staging to production deployment process
      7. Fix: AI Scanner Payment Integration – https://github.com/usmannasir/cyberpanel/commit/4e773a54
        • Added payment method support for free scan users
        • Fixed balance refresh functionality
        • Ensured free scan allocation works correctly
      8. Fix: Setup Wizard and Onboarding – https://github.com/usmannasir/cyberpanel/commit/b362bd3c
        • Resolved setup wizard initialization issues
        • Improved onboarding process stability
      9. Fix: Backup System – https://github.com/usmannasir/cyberpanel/commit/07a5f2fa
        • Fixed backup notification system
        • Resolved restore backup page issues
      10. Fix: MySQL Table Operations – https://github.com/usmannasir/cyberpanel/commit/4f4cf35a
        • Improved MySQL table handling
        • Enhanced database operation stability

      v2.4.1 Stable – Main Release

      Dated: 21st May 2025

      Features:

      1. Web Based Terminal for website users.
      2. Real time usage graphs for websites.
      3. Free SMTP Plugin installation.

      Bug Fixes

      1. bug fix: site id in wp manager
      2. bug fix: wp scan button
      3. bug fix: with website search and wpsites
      4. improve website home page
      5. bug fix: to wp install, improved file manager and custom ssl implementation
      6. bug fix: decidedistro check

      v2.4.0 Stable – Main Release

      Dated: 20th April 2025

      Features:

      1. New WordPress Manager – Fresh UI
      2. New N8N Docker Application – Complete Feature
      3. One Click Backup server-to-server migration

      Bug Fixes

      • cloudlinux api issue fix
      • CSF 500 issue fix
      • Bug fix in the Alamalinux update
      • Compatibility issue with Python packages

      v2.3.9 Stable – Security Release

      Dated: 24th November 2024

      Bug Fixes Security Issues

      v2.3.8 Stable – Security Release

      Dated: 1st November 2024

      Bug Fixes – Security Fixes

      1. Fix – CVE-2024-51567
      2. Fix – CVE-2024-51378
      3. bug fix: gdrive backups
      4. bug fix file manager: file deletion
      5. bug fix: phpmyadmin
      6. bug fix: email list function
      7. added global session detector for further security

      v2.3.7 Stable

      Dated: 19th September 2024

      Features

      1. File Sytem Quotas
      2. PHP 8.3 Support
      3. Added Paypal support for purchasing backups and add-ons.

      Bug Fixes

      1. bug fix: creating user via cli
      2. bug fix: docker container create issue
      3. bug fix: paramiko update #1311
      4. bug fix: cloudlinux
      5. bug fix: with rention of backups
      6. bug fix: alma8 install
      7. bug fix: apache vhost config
      8. bug fix: #1287 docker on alma9
      9. bug fix #1288 alma update
      10. bug fix: add debugging infor for backup verification process
      11. bug fix: cffi version
      12. arm bug fix for mariadb
      13. tld extract bug fix

      v2.3.6 Stable

      Dated: 14th August 2024

      Features

      1. One-Click Backups 396
      2. Complete update of our codebase to support new versions of Django.
      3. Set-up wizard 454.
      4. Additional themes

      Bugs

      1. bug fix: config set up 53
      2. bug fix: mail domain for onboarding 41
      3. add imunify info: ref: 10 ClickUp 7
      4. bug fix: docker package assignment 9
      5. bug fix: root file manager edit 10
      6. feature: include homedir in backups 8
      7. fix mariadb install for ubuntu 20 ref 432 [ERROR] We are not able to run DEBIAN_FRONTEND=noninteract – #2 by usmannasir 3
      8. lsws conversion support for arm: ref 8 ClickUp 9
      9. bug fix: reset dns configurations upon email config rest 3
      10. bug fix: backup creation 20
      11. bug fix: mautic install 9
      12. updated error message to better reflect the situation 4
      13. bug fix: in backups v2 14
      14. bug fix: file editor issue ref: Error HTML Editor 2
      15. bug fix: snapshot delete backups v2 5
      16. bug fix clone/staging 6 ClickUp 3
      17. bug fix: remote transfer 5
      18. docker install function 7
      19. bug fix: wp manager ref 1 ClickUp 5
      20. bug fix: dns record add ref : 4 Txt record insertion error
      21. bug fix: reset default domain if old deleted 1
      22. added addon domain in CP 13
      23. feature: add port option for backup v2 1 Backup V2: Need to change Port of SFTP Backend 1
      24. bug fix: prevent dockerapps to be created by less ram 6
      25. bug fix submit docker install 4
      26. made changes in updatemysql 6
      27. bug fix: mariadb install 26
      28. bug fix: alias domains, php fetch and domain with sudo 6
      29. bug fix: command execution 4
      30. bug fix: potential issue with sftp destination add 8 #1210; 8

      v2.3.5 Stable

      Dated: 26th January 2024

      Learn more about this release here 2.8k.

      v2.3.4 Stable

      Dated: 25th April 2023

      Note: We’ve also released our API Docs: CyberPanel Cloud API 546

      I am happy to announce that CyberPanel v2.3.4 has been released. This update brings tons of features including support for Ubuntu 22 and bug fixes to CyberPanel.

      Features

      1. SSL v2 – Wild Card SSLs and Cloudflare Integration 400
      2. Backups v2 – Fast, Secure and Incremental Backups 404

      Bugs

      1. bug fix: email debugger · usmannasir/cyberpanel@6cb68a6 · GitHub 100
      2. Add path option to createChild function 28
      3. bug 25 fix 25: 25 #1019 3, this should refresh mail ssl incase its expired/renewd 25
      4. possible fix of 2 https://community.cyberpanel.net/t/snappymail-does-no… 49
      5. remove the need for adding folders manually 28
      6. update logic for refresh lic 9
      7. possible bug fix on ubuntu 22 upgrade 43
      8. ChangeLinuxUserPassword 39
      9. bug fix with external app 13
      10. bug fix: change package by owner 6
      11. add php8.1 to lsws config 70
      12. SSL Bug fix 136
      13. bug fix: for the view when docker is not installed 8
      14. bug fix: ftp issue on ubuntu22 41

      v2.1.2 Stable – Security Release

      Dated: 21st October 2021

      This version does not introduce many front-end features. However we got audited by rack911labs and we did many changes to improve the security and make CyberPanel best, free and most secure control panel.

      Features

      Bug fixes:

      v2.1.1 Stable

      Dated: 15th April 2021

      Features

      Bug Fixes

      Updates

      v2.0.3 Stable

      Dated: 20 Sep 2020

      Features

      Bug Fixes

      Updates

      v2.0.2 Stable

      Dated: 22 July 2020

      Features

      Bug Fixes

      Updates

      v2.0.1 Stable

      Dated: 2 June 2020

      Features

      Bug Fixes

      Updates

      v2.0.0 Stable

      Dated: 1st April 2020

      Note: This is a major upgrade with many bug fixes. CyberPanel users are advised to upgrade as soon as possible.

      Features

      Bug Fixes

      Updates

      v1.9.4 Stable

      Dated: 5th February 2020

      Note: Upgrade to this version as soon as possible, this includes many security fixes, details to be announced in our news section.

      Features

      Bug Fixes

      v1.9.3 Stable

      Dated: 3rd January, 2020

      Features

      Bug Fixes

      v1.9.2 Stable

      Dated: 12th November, 2019

      Features

      Bug Fixes

      Big thanks to following people for their contributions

      v1.9.1 Stable

      Dated: 15th October, 2019

      Features

      Bug Fixes

      Big thanks to following people for their contributions

      v1.9.0 Stable

      Dated: 23th August, 2019

      Features

      Bug Fixes

      v1.8.9 Stable

      Dated: 12th August, 2019

      Features

      • Added list pages for Users, Packages and Emails.
      • Ability to control these list pages via ACL.
      • Enable/Disable creation of Fully Qualified Domains as child-domains through Packages.
      • Login Page: Press Enter to login.

      Bug Fixes

      • Bug fixes to cPanel Importer for detecting email format.
      • Many bug fixes to Backup Engine and Remote Backups.
      • Bug fix to WordPress staging feature.
      • Bug fix to CSF.

      v1.8.8 Stable

      Dated: 30th July, 2019

      Features

      Bug Fixes

      • Bug fixes to cPanel Importer.
      • Many bug fixes to Backup Engine and Remote Backups.
      • Fixed CVE-2019-13056 in v1.8.7

      v1.8.7 Stable

      Dated: 16th July, 2019

      In between we also released v1.8.6, it was an emergency security release, thus this change log covers it.

      Features

      Bug Fixes

      • Bug fixes to cPanel Importer.
      • Other bug fixes that were introduced because of emergency security release v1.8.6

      Security Update

      v1.8.6 and v1.8.7 have many security enhancements. For all end user operations CyberPanel now use run-as user (the website user) to perform those operations. Special CyberPanel -> LSCPD connection is used for security communication for different sort of user elevation and to drop priviliges when necessary. Authentication token is used for communication to prevent un-athorized access to the command socket.

      This will be our first security release in our 2-stage security release model. Everyone must update your servers to v1.8.7 as soon as possible.

      Special thanks to rack911labs.com, for doing a security audit and help us find/fix the issues.

      v1.8.5 Stable

      Dated: 3rd July, 2019

      Features

      Bug Fixes

      • Fixed the API Access Disabled issue with WHMCS, more details here.
      • Fixed the Remote Backup Storage Issue.

      v1.8.4 Stable

      Dated: 7th June, 2019

      Features

      v1.8.3 Stable

      Dated: 9th May, 2019

      Features

      Bug Fixes

      • Bug fix to remote backups.
      • Bug fix to File Manager while fixing permissions.
      • Bug fix to ModSecurity.

      v1.8.2 Stable (Security Release)

      Dated: 2nd April, 2019

      Details about the security patch can be found in our news section.

      Features

      • Search through websites.
      • Random Password Generator.
      • Rewrite Templates on top of Rewrite Rules Box.
      • Enable/Disable API Access.

      Bug Fixes

      • Major bug fixes to Backup Engine (Remote and Scheduled Backups).
      • Bug fix, that now allow git private repos to be attached.

      v1.8.1 Stable

      Dated: 6th February, 2019

      Features

      • Design Overhaul.
      • Volume Mapping in Docker Manager.

      Bug Fixes

      v1.8.0 Stable

      Dated: 25th January, 2019

      Features

      Bug Fixes

      • Bug fix to AWS S3 Backups.
      • Bug fix to Email Marketing.

      v1.7.7 Stable

      Dated: 8th January, 2019

      Features

      Bug Fixes

      • Bug fix for Mod Security Rules Packs.

      v1.7.6 Stable

      Dated: 26 December, 2018

      Features

      Bug Fixes

      • Bug fix for large files to AWS S3.
      • Bug fix to CSF.

      v1.7.5 Stable

      Dated: 14 December, 2018

      Features

      Bug Fixes

      • Bug fix to Backup Engine.
      • Bug fix to SSH Keys.
      • Improvements to upgrade process.

      v1.7.4 Stable

      Dated: 23 November, 2018

      Features

      • [Beta] CyberPanel for Ubuntu 18.04 and 18.10.
      • Ability to switch from OpenLiteSpeed to LiteSpeed Enterprise Web Server.
      • [Beta] Launch of CyberPanel on Cloud.

      Bug Fixes

      • Bug fix to tuning for LiteSpeed Enterprise.
      • Bug fixes to SSL Engine (Drop certbot support).
      • Bug fixes to Email Marketing Tool.
      • Bug fix to Git.

      v1.7.3 Stable

      Dated: 23 October, 2018

      Features

      Bug Fixes

      • Bug fix to SSL Engine.

      Official Plugin

      v1.7.2 Stable

      Dated: 1st October, 2018

      • Adjust niceness value for Backup/Restore process.
      • Bug fix in SSL Engine.
      •  

      Posted
      Updated
      Byadmin

      Table of Contents

      Reviews 67 • Excellent

      4.3 ⓘ

      Facebook Twitter Linkedin-in Youtube
      Other Projects
      Company
      Resources

      Reviews 75 • Excellent

      4.4 ⓘ
      Facebook Twitter Linkedin-in Youtube
      Other Projects
      Company
      Resources
      CyberPanel Features
      Backup

      Peace of Mind with CyberPanel One-Click Backups.
      Wordpress Manager

      Effortless WordPress Management with CyberPanel
      More Features

      Best FREE Control Panel to Manage your Websites

      Docker app

      Unlock Seamless Deployment with Docker Apps Manager

      Support

      All The Answers You Need Are Right At Your Fingertips

      Email Debugger

      Server level checks, Reset Server-wide Configuration, Website-level Email issues.
      CYBERPANEL
      Free Managed Email Service

      Delivery Optimization + Spam Protection
      Test Email Delivery

      Fix Email Delivery Problems for free
      CyberPanel Repo

      Access to CyberPanel Source Code
      RESOURCES
      SUPPORT
      PARTNERS
      DEVELOPERS