Changelog

  1. Linux VPS, Windows VDS, cPanel License, Litespeed License, Imunify360 License & Cloudlinux License
  2. Changelog
What's New

AMS System Changelog

Every new feature, improvement and fix we ship across our licenses, servers and support — newest first.

Licensing

CloudLinux Licensing System

  • improved
    Improved CloudLinux license validation.
  • fixed
    Fixed handling of repository URLs and configuration files.
  • bug
    Minor bug fixes and general improvements.
Licensing

cPanel Licensing System

  • new
    Added TuxCare ELS PHP management via amslicensecp --tuxcare-php with install, reinstall, remove, list, and repository controls. Run --tuxcare-php --help to view all available options.
  • fixed
    Fixed SSL certificate generation for cPanel services.
  • security
    Temporarily disabled Imunify360 cPanel Account Protection as a workaround for the current cPanel/Imunify360 compatibility issue, until an official fix is available.
  • improved
    Minor bug fixes and general improvements.
Licensing

CloudLinux 10 Licensing Support Added

  • improved
    Added full licensing support for CloudLinux 10.
  • new
    TuxCare Endless Lifecycle Support (ELS) is now included free of charge with CloudLinux licenses.
  • update
    Please, Update our CloudLinux licensing script. 
    amslicensecx --check-updates
Server Support

Security Advisory: Zapscape (CVE-2026-64561) KVM guest escape and local root: mitigation and kernel update for CloudLinux

  • security
    Zapscape (CVE-2026-64561) is a vulnerability in the Linux kernel’s KVM code. It has two attack paths. On an affected host that runs virtual machines, a tenant with root inside their own guest can take root on the host. On affected shared-hosting servers that run no virtual machines at all, an ordinary user or a compromised website can create a throwaway guest of their own and attack the host kernel from inside it.
  • resolution
    Mitigation before the KernelCare update is released:
    If your server runs no virtual machines

    Most shared-hosting servers are in this group. Unload the KVM modules to close both attack paths without requiring a reboot.

    sudo modprobe -r kvm_intel kvm_amd kvm 2>/dev/null
    Block KVM modules from loading

    Block the KVM modules from loading again at boot.

    echo -e 'install kvm_intel /bin/false\ninstall kvm_amd /bin/false' | sudo tee /etc/modprobe.d/disable-kvm.conf
    Verify KVM is disabled

    Confirm that no KVM modules are loaded and that the KVM device is unavailable.

    lsmod | grep kvm; ls /dev/kvm
    Revert the KVM block

    After installing a patched kernel, remove the block and reload the KVM module, or reboot the server.

    rm -f /etc/modprobe.d/disable-kvm.conf && sudo modprobe kvm_intel
    Check nested virtualization status

    Check the current live value before making changes. Use kvm_intel on Intel-based hosts

    cat /sys/module/kvm_intel/parameters/nested

    Check the current live value before making changes, Use kvm_amd on AMD-based hosts.

    cat /sys/module/kvm_amd/parameters/nested
    Disable nested virtualization

    Use this command on Intel-based hosts.

    echo 'options kvm_intel nested=0' | sudo tee /etc/modprobe.d/zapscape.conf

    Use this command on AMD-based hosts.

    echo 'options kvm_amd nested=0' | sudo tee /etc/modprobe.d/zapscape.conf
    Update KernelCare

    If you are using our cPanel or CloudLinux license you have access to KernelCare license for free, To update and get the latest patch, run

    amslicensekc

    Or use this command:

    kcarectl --update
    Check if the Zapscape kernel patch is applied

    Once updated, check whether the Zapscape kernel patch was applied to your kernel.

    kcarectl --patch-info | grep 'CVE-2026-64561'
Licensing

LiteSpeed Web ADC v3.4.0 Now Available

  • new
    • [Feature] Add Anubis proof-of-work support.
    • [Feature] Add ALTCHA CAPTCHA support.
    • [Feature] Add Zstandard compression support.
    • and more!
  • fixed
    Include all bug fixes applied to 3.3.x releases.
  • update
    Update LiteSpeed Web ADC to v3.4.0
    Using our litespeed ADC license command 
    amslicenselb --update-litespeed-adc
    Using litespeed ADC updater script 
    /usr/local/lslb/admin/misc/lsup.sh -f -v 3.4.0
Licensing

LiteSpeed Web Server v6.3.6 Build 6 Now Available

  • bug
    • Address another HTTP/2 request body length corner case that caused `400` status codes from proxy backends
    • Allow '\' in query string for HTTP/2 and HTTP/3 request header
  • improved
    Support multiple remote ACL URLs.
  • update
    Update LiteSpeed Web Server to v6.3.6 Build 6
    Using our litespeed license command 
    amslicensels --update-litespeed
    Using litespeed updater script 
    /usr/local/lsws/admin/misc/lsup.sh -f -v 6.3.6
Server Support

Security Advisory: OVSwrap (CVE-2026-64531) local root exploit

  • security
    OVSwrap (CVE-2026-64531) is a vulnerability in the Linux kernel’s Open vSwitch action validation that lets any local unprivileged user become root. It is an upstream kernel bug, so it reaches the whole EL9 and EL10 family and several Debian and Ubuntu releases. A working public exploit exists.
  • resolution
    Mitigation before the KernelCare update is released:
    Block the module from loading

    This stops the vulnerable module loading at boot on servers that do not need it.

    echo 'install openvswitch /bin/false' > /etc/modprobe.d/ovswrap.conf
    Unload openvswitch if already loaded

    If the module is already loaded on a server that does not use it, unload it as well.

    lsmod | grep -E '^openvswitch' && modprobe -r openvswitch
    Update KernelCare

    If you are using our cPanel or CloudLinux license you have access to KernelCare license for free, To update and get the latest patch, run

    amslicensekc

    Or use this command:

    kcarectl --update
    Check if kernel patched

    Once updated, you can check whether the OVSwrap kernel patch was applied to your kernel

    kcarectl --patch-info | grep 'CVE-2026-64531'
Server Support

Security Advisory: cPanel and WP Squared

  • security
    A local user's .forward file can trigger unsafe string expansion in Exim's redirect router, allowing command injection under certain pipe transport configurations.
  • security
    A privilege escalation vulnerability exists in cPanel & WHM's database management functionality.
  • security
    A vulnerability in the cPanel web server allows manipulation of cpsrvd responses under limited conditions.
  • fixed
    Patched versions are: 11.110.0.137, 11.118.0.71, 11.126.0.78, 11.134.0.48, 11.136.0.32, 138.1.6 (WP2)
  • resolution
    Update to the latest patched version:
    For WHM cPanel Servers 
    amslicensecp --update-cpanel
    For WP Squared Servers 
    amslicensewp2 --update-wp2
VPS Hosting

Faster Linux VPS deployments

  • improved
    New VPS orders are built and online in under 90 seconds on average.
  • new
    Added one-click WHM/cPanel bootstrap on first boot.
VDS Windows

Windows Server 2022 templates

  • new
    Ready-to-go Windows Server 2022 templates added to every VDS plan.
  • security
    RDP now ships hardened by default: non-standard port, Network Level Authentication enforced.
Server Support

Remote Windows installation, improved

  • new
    Remote Windows installs now supported on netboot / rescue-capable servers at more providers.
  • improved
    Clearer progress updates on your support ticket while the install runs.
VPS Hosting

NVMe storage on every VPS

  • improved
    All VPS plans moved to pure NVMe storage — a large step up in disk speed at no extra cost.
  • new
    Added weekly off-site snapshots as an optional add-on.
Licensing

LiteSpeed licenses with auto-renew

  • new
    LiteSpeed Web Server and OpenLiteSpeed licenses are now available.
  • improved
    Auto-renew keeps your license active without any manual step at renewal time.
Server Support

Free migration service

  • new
    We now migrate your sites and accounts from your old host to a new server, free of charge.
Licensing

Plesk licenses added

  • bug
    Plesk Web Admin, Web Pro and Web Host editions are now available at reseller pricing.
  • resolution
    Restart the queue worker to clear it: 
    systemctl restart amsqueue
Billing & Account

Redesigned client area

  • improved
    A cleaner, faster, fully mobile-friendly client area and invoices.
  • new
    Added a single dashboard view of every service, license and invoice in one place.
VDS Windows

More Windows editions

  • new
    Added Windows Server 2016 and 2019 alongside 2012 R2 on all VDS plans.
  • improved
    Bring-your-own-license option added for customers with existing Windows keys.
VPS Hosting

DDoS protection on all servers

  • security
    Always-on network DDoS protection is now included with every VPS at no extra charge.
Licensing

Imunify360 self-service

  • new
    Imunify360 and ImunifyAV+ licenses can now be ordered and managed directly from your account.
  • improved
    Instant key delivery, no waiting for manual issue.
Licensing

Free softaculous with cPanel licenses

  • improved
    From now on we provide FREE Softaculous license with our cPanel licenses (VPS and Dedicated)
Server Support

Security & optimization service

  • new
    Launched a dedicated server security-hardening and performance-tuning service.
  • new
    Includes firewall setup, kernel tuning and a full security audit report.
VDS Windows

Windows VDS line launched

  • new
    Introduced dedicated Windows VDS plans with guaranteed RAM and CPU.
Licensing

Softaculous license is now available

  • new
    One command install and configuration + Realtime Softaculous updates.
  • improved
    Bundle pricing when ordered together with a cPanel license.
VPS Hosting

Free cPanel/WHM with every VPS

  • new
    Every Linux VPS now includes a free cPanel or WHM license.
  • improved
    Doubled the RAM on all plans at the same price.
Server Support

OS installation & hardening

  • new
    Added a managed OS installation service covering Linux and Windows, with post-install hardening.
Licensing

JetBackup 4 and 5 licenses have been added

  • new
    we provide JetBackup 5 and JetBackup 4 licenses using our own license generator.
VPS Hosting

Resource upgrade across all plans

  • improved
    Increased CPU cores and disk space on every VPS plan, free for existing customers.
  • fixed
    Resolved slow provisioning during peak hours.
Server Support

Virtualization setup service

  • new
    Added KVM / Proxmox virtualization setup and remote-hands support for dedicated servers.
VPS Hosting

New datacenter location

  • new
    Added a European datacenter location for lower latency to EU customers.
Licensing

cPanel licensing system has been added

  • new
    Started offering cPanel licenses at competitive prices.
VPS Hosting

Second server location

  • new
    Expanded capacity with a second server location and more plan options.
  • improved
    Faster network uplink across the fleet.
Server Support

Managed support tickets

  • new
    Introduced managed technical support with fast ticket response times.
AmigoServ

AmigoServ is live

  • new
    Launched AmigoServ with our first Linux VPS plans and basic server support.