Skip to content
Threat Feed
Subscribe

Vendor

Softaculous

2 briefs RSS
critical advisory

Unauthenticated Remote Command Execution in Softaculous Virtualizor

CVE-2026-43641 is an OS command injection vulnerability in the Virtualizor billing module that allows unauthenticated remote attackers to achieve root-level code execution via serialized billing data.

Virtualizor
1r 2t 1c
high advisory

BGP Hijacking Campaign Targeting Virtualizor Software Updates

An unidentified threat actor leveraged a 33-hour BGP hijack to intercept traffic and serve malicious updates for the Virtualizor web hosting platform via a spoofed update portal.

Virtualizor supply-chain-attack bgp-hijacking software-update-tampering
2t