{"id":5809,"date":"2025-11-18T14:37:02","date_gmt":"2025-11-18T14:37:02","guid":{"rendered":"https:\/\/www.stanventures.com\/news\/?p=5809"},"modified":"2025-11-18T14:37:02","modified_gmt":"2025-11-18T14:37:02","slug":"imunify360-scanner-bug-puts-millions-of-websites-at-risk","status":"publish","type":"post","link":"https:\/\/www.stanventures.com\/news\/imunify360-scanner-bug-puts-millions-of-websites-at-risk-5809\/","title":{"rendered":"Imunify360 Scanner Bug Puts Millions of Websites at Risk"},"content":{"rendered":"

A newly disclosed flaw in Imunify360\u2019s malware scanner can let attackers run their own code on hosting servers. Anyone managing a site or a shared server should update immediately to prevent a full compromise.<\/b><\/p>\n

\"Imunify360<\/p>\n

A critical security weakness in Imunify360 AV, a tool widely used across shared and managed hosting platforms, has been found to give attackers a pathway to run their own code on a server.\u00a0<\/span><\/p>\n

The issue affects both the file-scanning engine and the database-scanning module, which means attackers have more than one way to trigger the flaw.\u00a0<\/span><\/p>\n

Patchstack<\/span><\/a>, the security firm that analyzed and publicly documented the vulnerability, warns that the impact can escalate from a single compromised website to a full server takeover, depending on how much access the scanner has.\u00a0<\/span><\/p>\n

The tool is used across hosting environments that collectively support up to 56 million sites, making the discovery both serious and far-reaching.<\/span><\/p>\n

\n
\n

<\/p>\n<\/span><\/div>\n