CyberPanel and PHP2Shell

What CyberPanel has said about the fix, and where to update and restart PHP in it.

What CyberPanel says

CyberPanel statement (2026-10-21) says fixed LiteSpeed PHP packages (8.2.35, 8.3.36, 8.4.27, 8.5.12) were confirmed and QA'd on an Ubuntu 26.04 server only; other operating systems, third-party extensions and customer servers were not verified. No new CyberPanel source release is needed; the fix is a PHP package update plus refreshing the panel's own lsphp copy. PHP 8.1 and older need a vendor-confirmed backport or a move to a supported branch.

Updating PHP core while retaining an old OPcache module is incomplete.
cyberpanel.net2026-10-21Official

Check the PHP version

Statement says to verify through real HTTP requests, panel login, phpMyAdmin and applications; no literal command given. Panel binary path: /usr/local/lscp/fcgi-bin/lsphp.

Update PHP

Procedure only (no literal commands in the post): back up and list every PHP branch in use including the panel's; refresh repository metadata, confirm fixed candidate versions, simulate the upgrade, then upgrade each branch with its matching modules; replace the panel's lsphp binary (/usr/local/lscp/fcgi-bin/lsphp) with the updated branch's binary, keeping root ownership and executable permissions.

Restart PHP

Post says to restart web and panel services and ensure old workers have exited; no exact commands given.

Pages we read