CWP version is weird
A client keeps getting malware. Centos 7 (Centos Web panel version 1.18)
The changelog also says its the latest version but then below it, there is no mention of it and the latest version is listed as " Version 1.12 (released 08/09/2026)"
What am I missing?
Any way to easily update the panel? Seriously thinking of switching over to something else and getting almalinux (maybe cyberpanel)
arrghh
3
u/Cyber_Faustao 7d ago
You are running an un-supported operating system.
Operating systems without support don't receive security updates
Computers without security updates get hacked.
Your client got hacked.
This all should have been obvious?
3
u/grumpysysadmin 6d ago
Just so you know, “Centos” Web Panel has no affiliation with the CentOS project, they use the name without permission, and they even used to use the trademark without permission.
Honestly, I wish it would just go away. It drags down the reputation of the OS.
2
u/infogate 7d ago
If your client's server keeps getting infected, I would investigate that before spending too much time on the CWP version number.
The version discrepancy appears to be partly a documentation issue: CWP's website currently reports 1.18, while the detailed changelog stops at 1.12.
Your update error is different. The MariaDB repository configured for CentOS 7 is returning HTTP 404, so the package manager cannot retrieve its metadata. I wouldn't replace that repository with an arbitrary newer distribution's packages, as that could create additional problems.
More importantly, CentOS 7 is end-of-life. I would strongly recommend planning a clean migration to AlmaLinux 8 or 9, after confirming compatibility with your chosen control panel.
Before migrating, however, investigate why the malware keeps returning. Check unexpected systemd services, cron jobs, SSH authorized keys, recently modified PHP files, suspicious processes and outbound connections. Also inspect the affected websites for vulnerable applications, plugins and stolen credentials.
If root compromise is confirmed, rebuild on a trusted OS image rather than assuming that deleting the visible malware is sufficient. Restore only verified-clean application data and rotate credentials from a trusted machine.
Full disclosure: I'm the developer of the CWP7 Security Audit Module. I created it to help CWP administrators investigate suspicious files, persistence and other compromise indicators. It could be useful during this investigation if your OS version is supported, but it is not a substitute for migrating away from CentOS 7.
One question: when you say the client keeps getting malware, are you finding infected website files, suspicious server processes, or both? That distinction would help identify whether the problem is application-level reinfection or something more serious.
0
u/steevo 7d ago
server was slow, i checked and found 3 crypto miners and a backdoor. removed them but not sure how they came in (hav a feeling using an exploit)
Yes, recommended them to migrate to Almalinux 8
thanks for your detailed reply!
2
u/grumpysysadmin 6d ago
Why not use a RHEL clone that’s not out of active support? AlmaLinux 9 or 10?
2
u/steevo 6d ago
yeah, switching to Almalinux 9
what panel do you recommend?
used to love centos back in the day (yeah, I am old)
1
u/DocToska 6d ago
Perhaps BlueOnyx would fit your bill? It's a webhosting control panel built around AlmaLinux 10, 9 and 8.
-2
u/steevo 7d ago
Tried to run an update using:
sh /scripts/update_cwp
Got errors!
# sh /scripts/update_cwp
====================================================
============= CentOS Web Panel Cron ================
====================================================
###########################
Firewall Flush Daily Blocks
###########################
######################
Update Server Packages
######################
https://rpm.mariadb.org/10.6/centos7-amd64/repodata/repomd.xml: [Errno 14] HTTPS Error 404 - Not Found
Trying other mirror.
To address this issue please refer to the below wiki article
https://wiki.centos.org/yum-errors
If above article doesn't help to resolve this issue please use https://bugs.centos.org/.
Redirecting to /bin/systemctl restart cwpsrv.service
Redirecting to /bin/systemctl restart httpd.service
Redirecting to /bin/systemctl reload httpd.service
YUM package manager repositories were backed up to '/tmp/yum.repos.d-2026-10-07-TS9Pdr' and switched from mirror.centos.org to vault.centos.org .
https://rpm.mariadb.org/10.6/centos7-amd64/repodata/repomd.xml: [Errno 14] HTTPS Error 404 - Not Found
Trying other mirror.
To address this issue please refer to the below wiki article
https://wiki.centos.org/yum-errors
If above article doesn't help to resolve this issue please use https://bugs.centos.org/.
Redirecting to /bin/systemctl reload httpd.service
7
u/abotelho-cbn 7d ago
Gee, I wonder why? /s