We have detected a vulnerability in a component of the operating system on Cloud servers. This component, called BIND, is responsible for managing internet addresses (like the ones you use to access your website). The vulnerability affects older versions of this system. If your server is using an affected version, it's important to update the system to protect it. If the server is managed by us, we are already updating it. If you manage it yourself, follow the instructions below.
What happened, explained simply
BIND is a program in the Debian operating system that helps websites function correctly. In certain configurations, if an older version of BIND is used, a failure can occur that may temporarily cause the system to stop working. This doesn't allow an attacker to cause direct damage, but it can cause interruptions. This vulnerability has the technical name CVE-2026-96888 and has been rated as high severity (CVSS 7.5). A *CVE* is a unique identifier for each discovered vulnerability.
Why it's important
If your server is using an affected version of BIND, it could temporarily stop working under specific conditions. This could affect the availability of your website or service, meaning your customers might not be able to access it. Although there is no evidence that this vulnerability is currently being used to attack websites, it is recommended to apply the patch to avoid any issues.
Does it affect you?
The vulnerability affects versions of BIND prior to the corrected version: 13:1:9.20.30-1~deb13u1. If your server is using an older version, it is recommended to update. To check the current version of your server, you can review the Security section in SWPanel. There you will see if your service is affected. If you don't know how to do this, you can open a support ticket from SWPanel and we'll help you.
What SWPanel does
SWPanel detects this vulnerability by analyzing managed servers. If the server is managed by us, we are already updating the system to the corrected version. If you manage the server yourself, we won't update it for you, but we will notify you so you can do it. If your website was installed from SWPanel and you have automatic updates enabled, it may already have been updated. You can check this in the Security section.
What you need to do
If you manage the server yourself and it is using an affected version, follow these steps:
- Make a backup of your server. If something goes wrong, you can restore it.
- Update the system to the corrected version or higher. You can do this from your server's control panel or with the help of a technician.
- Check that everything works after the update. Access your website and make sure there are no errors.
- Re-analyze your server in the Security section of SWPanel to see if it no longer appears as affected.
Frequently asked questions
Do I have to pay for the update?
No, the update is free if your server is managed by us or if you do it yourself.
How do I know if I'm protected?
When your server is using the corrected version or higher, it will no longer be vulnerable. You can check this in the Security section of SWPanel.
What if I don't know how to update it?
You can open a support ticket from SWPanel and we'll help you do it.
Can my website break after the update?
It's possible, which is why it's important to make a backup first. If something goes wrong, you can restore your website.
Need help?
If you have questions or need help updating your server, open a support ticket from SWPanel. We'll assist you and help you resolve it.
