# Latest **URL:** https://forum.hestiacp.com/latest.md [Latest](https://forum.hestiacp.com/latest.md) · [Categories](https://forum.hestiacp.com/categories.md) --- ## [Read This First: Important Notes for Running HestiaCP Safely](https://forum.hestiacp.com/t/read-this-first-important-notes-for-running-hestiacp-safely/383)
**Author:** [@Raphael](https://forum.hestiacp.com/u/Raphael)\ **Replies:** 2\ **Last updated:** [February 6, 2022, 3:42pm UTC](https://forum.hestiacp.com/t/read-this-first-important-notes-for-running-hestiacp-safely/383 "2022-02-06T15:42:14Z")
HestiaCP makes managing a server easier — but it doesn’t make it safe by itself. If you’re running a public server, you need to understand the basics of system administration. That means knowing how to: Keep your sy… --- ## [Hestia Upgrade A lot of errors](https://forum.hestiacp.com/t/hestia-upgrade-a-lot-of-errors/22413)
**Author:** [@surya](https://forum.hestiacp.com/u/surya)\ **Replies:** 7\ **Last updated:** [November 3, 2026, 11:39am UTC](https://forum.hestiacp.com/t/hestia-upgrade-a-lot-of-errors/22413 "2026-11-03T11:39:42Z")
I kept hestia auto update disabled as it would get untested updates and disturbed my whole server, from the experience of past releases of hestia which broke down my server various time , i kept it disabled. Everyt… --- ## [Extremely slow web panel](https://forum.hestiacp.com/t/extremely-slow-web-panel/22258)
**Author:** [@jilabaca](https://forum.hestiacp.com/u/jilabaca)\ **Replies:** 12\ **Last updated:** [November 3, 2026, 10:49am UTC](https://forum.hestiacp.com/t/extremely-slow-web-panel/22258 "2026-11-03T10:49:53Z")
Hi, I’m running HestiaCP with over 700 users (students) and am experiencing several issues; I’ll split them into separate threads to see if you can help. My second issue concerns the panel itself: navigating between dif… --- ## [Nginx Hestia won't install on Ubuntu 26.04, apparently due to the processor](https://forum.hestiacp.com/t/nginx-hestia-wont-install-on-ubuntu-26-04-apparently-due-to-the-processor/22386)
**Author:** [@bestperson](https://forum.hestiacp.com/u/bestperson)\ **Replies:** 4\ **Last updated:** [November 3, 2026, 9:27am UTC](https://forum.hestiacp.com/t/nginx-hestia-wont-install-on-ubuntu-26-04-apparently-due-to-the-processor/22386 "2026-11-03T09:27:39Z")
I’m currently installing the panel on Ubuntu 26.04 and getting an nginx error. Is there a way to get around this, or will using 24.04, for example, give any results? Hestia version (1.10.5) and OS (Ubuntu 26.04); proces… --- ## [AWStats Replacement - Which alternative should HestiaCP adopt?](https://forum.hestiacp.com/t/awstats-replacement-which-alternative-should-hestiacp-adopt/22073)
**Author:** [@dotasense](https://forum.hestiacp.com/u/dotasense)\ **Replies:** 5\ **Last updated:** [November 2, 2026, 9:10pm UTC](https://forum.hestiacp.com/t/awstats-replacement-which-alternative-should-hestiacp-adopt/22073 "2026-11-02T21:10:33Z")
Hi everyone, I’m really hoping the AWStats replacement makes it into the next stable release. Since AWStats is no longer actively maintained by its original developers, it makes sense for HestiaCP to transition to a mor… --- ## [\[Theme\] Hestia Glass – A Modern Glassmorphism Theme for HestiaCP](https://forum.hestiacp.com/t/theme-hestia-glass-a-modern-glassmorphism-theme-for-hestiacp/22380)
**Author:** [@memarizade](https://forum.hestiacp.com/u/memarizade)\ **Replies:** 1\ **Last updated:** [November 2, 2026, 9:02pm UTC](https://forum.hestiacp.com/t/theme-hestia-glass-a-modern-glassmorphism-theme-for-hestiacp/22380 "2026-11-02T21:02:56Z")
Hi everyone, I’ve put together a new custom theme for HestiaCP called Hestia Glass. The goal was to bring a modern glassmorphism aesthetic to the panel while keeping the interface clean, lightweight, and easy on the eye… --- ## [PHP vulnerability](https://forum.hestiacp.com/t/php-vulnerability/22325)
**Author:** [@Wibol](https://forum.hestiacp.com/u/Wibol)\ **Replies:** 104\ **Last updated:** [November 2, 2026, 8:44am UTC](https://forum.hestiacp.com/t/php-vulnerability/22325 "2026-11-02T08:44:04Z")
If I stop the Apache service until the patch is available, will my HestiaCP be safe until then? --- ## [Ubuntu CVE-2026-98432](https://forum.hestiacp.com/t/ubuntu-cve-2026-98432/22385)
**Author:** [@pluto](https://forum.hestiacp.com/u/pluto)\ **Replies:** 1\ **Last updated:** [November 2, 2026, 4:02am UTC](https://forum.hestiacp.com/t/ubuntu-cve-2026-98432/22385 "2026-11-02T04:02:40Z")
Ref: CVE-2026-98432 | Ubuntu This seemed quite problematic. Attackers can send crafted packets to your server to crash the kernel or DDoS it. Remote Code Execution is possible but unlikely (although … AI). There is cu… --- ## [Webmail (Roundcube) displays PHP code instead of running it](https://forum.hestiacp.com/t/webmail-roundcube-displays-php-code-instead-of-running-it/22383)
**Author:** [@Felix](https://forum.hestiacp.com/u/Felix)\ **Replies:** 14\ **Last updated:** [November 1, 2026, 11:58pm UTC](https://forum.hestiacp.com/t/webmail-roundcube-displays-php-code-instead-of-running-it/22383 "2026-11-01T23:58:28Z")
Hello all :waving\_hand: I’m facing an issue with Roundcube Webmail on Hetzner VPS, running Hestia Control Panel v1.10.5 on Ubuntu 22.04.5 LTS. When visiting webmail.example.com I see this: \ **Author:** [@nazmul47](https://forum.hestiacp.com/u/nazmul47)\ **Replies:** 1\ **Last updated:** [November 1, 2026, 4:50pm UTC](https://forum.hestiacp.com/t/php-warning-failed-loading-zend-extension-ioncube-loader/22382 "2026-11-01T16:50:12Z") Hello HestiaCP Support Team, I am experiencing an issue with PHP 8.3 on my HestiaCP server. When running my MailWizz console auto-update command, PHP displays a warning that the ionCube Loader extension cannot be loaded… --- ## [HestiaCP File Manager not working](https://forum.hestiacp.com/t/hestiacp-file-manager-not-working/13031)
**Author:** [@rj2010ism](https://forum.hestiacp.com/u/rj2010ism)\ **Replies:** 9\ **Last updated:** [October 31, 2026, 2:51pm UTC](https://forum.hestiacp.com/t/hestiacp-file-manager-not-working/13031 "2026-10-31T14:51:52Z")
Hi, do anyone have a problem with HestiaCP file manager? my file manager opens but cant view, or upload files… it only shows a white page when i click on file manager… there anyway to fix this ? using version: v1.8… --- ## [Mail not working after Ubuntu upgrade](https://forum.hestiacp.com/t/mail-not-working-after-ubuntu-upgrade/22312)
**Author:** [@Gintcho](https://forum.hestiacp.com/u/Gintcho)\ **Replies:** 21\ **Last updated:** [October 30, 2026, 7:34pm UTC](https://forum.hestiacp.com/t/mail-not-working-after-ubuntu-upgrade/22312 "2026-10-30T19:34:16Z")
Hello, I recently upgraden to Ubuntu 26 and the noticed that the certificates are not accepted. I installed fresh ones, but even after this cannot login in e.g. Thunderbird in Andoid. Any ideas how to login as everyth… --- ## [Real IP behind reverse proxy](https://forum.hestiacp.com/t/real-ip-behind-reverse-proxy/22374)
**Author:** [@garnoux](https://forum.hestiacp.com/u/garnoux)\ **Replies:** 2\ **Last updated:** [October 29, 2026, 4:02pm UTC](https://forum.hestiacp.com/t/real-ip-behind-reverse-proxy/22374 "2026-10-29T16:02:59Z")
Hi, ive tried to add my reverse proxy ip in cloudflare.conf file. it seems to work for website access logs but not for accessing mgmt interface (port 8083) when LOGIN\_USE\_IPLIST is used. the logon keeps the reverse pr… --- ## [Gmail mails not received - TLS handshake error](https://forum.hestiacp.com/t/gmail-mails-not-received-tls-handshake-error/22373)
**Author:** [@omar](https://forum.hestiacp.com/u/omar)\ **Replies:** 24\ **Last updated:** [October 29, 2026, 2:47pm UTC](https://forum.hestiacp.com/t/gmail-mails-not-received-tls-handshake-error/22373 "2026-10-29T14:47:08Z")
Subject: Gmail mails not received - TLS handshake error Hello, After manually renewing/replacing Let’s Encrypt certificates, emails sent from Gmail are no longer delivered. Current status: - Outgoing mail works - Ma… --- ## [Cron Job does not work no matter what I do?](https://forum.hestiacp.com/t/cron-job-does-not-work-no-matter-what-i-do/22376)
**Author:** [@bosunjohnson](https://forum.hestiacp.com/u/bosunjohnson)\ **Replies:** 14\ **Last updated:** [October 29, 2026, 1:58pm UTC](https://forum.hestiacp.com/t/cron-job-does-not-work-no-matter-what-i-do/22376 "2026-10-29T13:58:17Z")
Hi everyone, I am trying to create a cronjob via the hestiacp interface, I pasted this command below there. But I get permission errors wheneven the job runs. How can I fix this please? I am trying to add a job for goac… --- ## [Error message while suspending bulk domains](https://forum.hestiacp.com/t/error-message-while-suspending-bulk-domains/22375)
**Author:** [@bosunjohnson](https://forum.hestiacp.com/u/bosunjohnson)\ **Replies:** 1\ **Last updated:** [October 28, 2026, 9:57pm UTC](https://forum.hestiacp.com/t/error-message-while-suspending-bulk-domains/22375 "2026-10-28T21:57:44Z")
I have about 15 domains hosted on my vps. I tried bulk suspending 12 of them at one, the operation lasted almost a minute and I received this error message. Is this a bug? --- ## [Changing a users logs in as the user](https://forum.hestiacp.com/t/changing-a-users-logs-in-as-the-user/22368)
**Author:** [@duck](https://forum.hestiacp.com/u/duck)\ **Replies:** 5\ **Last updated:** [October 28, 2026, 7:15pm UTC](https://forum.hestiacp.com/t/changing-a-users-logs-in-as-the-user/22368 "2026-10-28T19:15:53Z")
Weird bug, have a new HestiaCP installation (v1.10.5). When I edit a user, by example to change it package, and press Save I end up logged in as the specific user. I can exit and return to my own user, so not a real big … --- ## [Is MariaDB 12.3 supported?](https://forum.hestiacp.com/t/is-mariadb-12-3-supported/22366)
**Author:** [@tom1](https://forum.hestiacp.com/u/tom1)\ **Replies:** 1\ **Last updated:** [October 27, 2026, 1:03pm UTC](https://forum.hestiacp.com/t/is-mariadb-12-3-supported/22366 "2026-10-27T13:03:29Z")
Does HeastiCP works with MariaDB 12.3 on Debian 13? I suggest adding the “Supported DB versions” under Requirements section in official Docs. --- ## [404 error on nginx basic auth](https://forum.hestiacp.com/t/404-error-on-nginx-basic-auth/22364)
**Author:** [@bob-hope](https://forum.hestiacp.com/u/bob-hope)\ **Replies:** 2\ **Last updated:** [October 26, 2026, 7:02pm UTC](https://forum.hestiacp.com/t/404-error-on-nginx-basic-auth/22364 "2026-10-26T19:02:07Z")
Using v-add-web-domain-httpauth to password protect a site main/subdir, the authentication works, but the browser returns a 404 error message even though the file exists. On a bad password nginx returns a error 401, whi… --- ## [Hestia-goaccess: GoAccess web stats add-on for HestiaCP](https://forum.hestiacp.com/t/hestia-goaccess-goaccess-web-stats-add-on-for-hestiacp/21800)
**Author:** [@Wutime](https://forum.hestiacp.com/u/Wutime)\ **Replies:** 24\ **Last updated:** [October 26, 2026, 6:15pm UTC](https://forum.hestiacp.com/t/hestia-goaccess-goaccess-web-stats-add-on-for-hestiacp/21800 "2026-10-26T18:15:44Z")
Hi everyone, I’ve completed a production quality standalone HestiaCP add-on called hestia-goaccess that adds GoAccess as a web statistics option for Hestia-hosted domains. GitHub: The goal was to provide a privacy-f… --- ## [I cannot create a user and domain with the letter 'ñ'](https://forum.hestiacp.com/t/i-cannot-create-a-user-and-domain-with-the-letter-n/22360)
**Author:** [@servtelecom](https://forum.hestiacp.com/u/servtelecom)\ **Replies:** 21\ **Last updated:** [October 26, 2026, 12:39pm UTC](https://forum.hestiacp.com/t/i-cannot-create-a-user-and-domain-with-the-letter-n/22360 "2026-10-26T12:39:33Z")
The panel does not allow me to create users or domains containing the letter ‘ñ’. ‘.es’ domains permit the use of this letter—which is used in my country—and allow such domains to be created. How can I go about this? --- ## [CVE-2026-115560: Separate Unpatched PHP RCE Vulnerability — HestiaCP Mitigation and Update Guidance](https://forum.hestiacp.com/t/cve-2026-115560-separate-unpatched-php-rce-vulnerability-hestiacp-mitigation-and-update-guidance/22348)
**Author:** [@ahmedhaseeb](https://forum.hestiacp.com/u/ahmedhaseeb)\ **Replies:** 5\ **Last updated:** [October 26, 2026, 10:17am UTC](https://forum.hestiacp.com/t/cve-2026-115560-separate-unpatched-php-rce-vulnerability-hestiacp-mitigation-and-update-guidance/22348 "2026-10-26T10:17:39Z")
Hello HestiaCP developers and community, I would like to bring attention to CVE-2026-115560, a newly disclosed PHP remote code execution vulnerability involving session upload progress. This is a separate vulnerability… --- ## [\[BUG\] migrate\_conf\_to\_ubuntu\_26.04.sh: Bind section breaks named when orphaned named.conf.default-zones exists (duplicate zone ".")](https://forum.hestiacp.com/t/bug-migrate-conf-to-ubuntu-26-04-sh-bind-section-breaks-named-when-orphaned-named-conf-default-zones-exists-duplicate-zone/22355)
**Author:** [@chrmina](https://forum.hestiacp.com/u/chrmina)\ **Replies:** 2\ **Last updated:** [October 25, 2026, 1:18pm UTC](https://forum.hestiacp.com/t/bug-migrate-conf-to-ubuntu-26-04-sh-bind-section-breaks-named-when-orphaned-named-conf-default-zones-exists-duplicate-zone/22355 "2026-10-25T13:18:22Z")
Hi all, This is a follow-up to my earlier report (\[SOLVED\] File Manager “Unknown error” after Ubuntu 26.04 upgrade — “No compatible key exchange algorithms found”) — same server, same upgrade. The official migration scr… --- ## [Emergency restore from inaccessible server](https://forum.hestiacp.com/t/emergency-restore-from-inaccessible-server/22340)
**Author:** [@serversonic](https://forum.hestiacp.com/u/serversonic)\ **Replies:** 4\ **Last updated:** [October 25, 2026, 1:10pm UTC](https://forum.hestiacp.com/t/emergency-restore-from-inaccessible-server/22340 "2026-10-25T13:10:48Z")
Our hosting server and backup server have been rendered inaccessible by Contabo and they are being very slow at fixing it, however I can access them in a rescue image so I have set up VMs at another provider and am tryin… --- ## [Adding IPV6 support to nginx](https://forum.hestiacp.com/t/adding-ipv6-support-to-nginx/12574)
**Author:** [@dinandmentink](https://forum.hestiacp.com/u/dinandmentink)\ **Replies:** 9\ **Last updated:** [October 25, 2026, 10:36am UTC](https://forum.hestiacp.com/t/adding-ipv6-support-to-nginx/12574 "2026-10-25T10:36:58Z")
Question. Hope someone can help me out while we wait for IPV6 to be available by default in hestia. I am trying to add a template which enables ipv6, but for the life of me can´t get it to work. Can someone spot my mis… --- ## [\[SOLVED\] File Manager "Unknown error" after Ubuntu 26.04 upgrade — "No compatible key exchange algorithms found" (bundled phpseclib vs. new OpenSSH)](https://forum.hestiacp.com/t/solved-file-manager-unknown-error-after-ubuntu-26-04-upgrade-no-compatible-key-exchange-algorithms-found-bundled-phpseclib-vs-new-openssh/22353)
**Author:** [@chrmina](https://forum.hestiacp.com/u/chrmina)\ **Replies:** 6\ **Last updated:** [October 25, 2026, 6:55am UTC](https://forum.hestiacp.com/t/solved-file-manager-unknown-error-after-ubuntu-26-04-upgrade-no-compatible-key-exchange-algorithms-found-bundled-phpseclib-vs-new-openssh/22353 "2026-10-25T06:55:56Z")
Note that the report was generated with the help of AI. It took me several hours to find a fix after researching the web and finally using AI. TL;DR After upgrading Ubuntu 24.04 → 26.04, the HestiaCP File Manager sho… --- ## [Minor: PHP Warning "Undefined variable $panel" in inc/policies.php on /login/ and /list/web/ (Ubuntu 26.04)](https://forum.hestiacp.com/t/minor-php-warning-undefined-variable-panel-in-inc-policies-php-on-login-and-list-web-ubuntu-26-04/22354)
**Author:** [@chrmina](https://forum.hestiacp.com/u/chrmina)\ **Replies:** 2\ **Last updated:** [October 25, 2026, 5:54am UTC](https://forum.hestiacp.com/t/minor-php-warning-undefined-variable-panel-in-inc-policies-php-on-login-and-list-web-ubuntu-26-04/22354 "2026-10-25T05:54:32Z")
Note the post was created with the help of AI. I did my research and used AI to help my find a solution to the issue Summary Cosmetic issue, no functional impact. Under Ubuntu 26.04’s PHP, policies.php emits warnings th… --- ## [How to use ob\_start and ob\_flush in PHP with the NGINX web stack?](https://forum.hestiacp.com/t/how-to-use-ob-start-and-ob-flush-in-php-with-the-nginx-web-stack/22352)
**Author:** [@Ben1](https://forum.hestiacp.com/u/Ben1)\ **Replies:** 2\ **Last updated:** [October 24, 2026, 1:36am UTC](https://forum.hestiacp.com/t/how-to-use-ob-start-and-ob-flush-in-php-with-the-nginx-web-stack/22352 "2026-10-24T01:36:31Z")
Hi ! First time user here. I’m trying hestiaCP and I must say it’s great so far. I had a question regarding the packaged web stack. From what I understand it comes with Apache + NGINX + PHP-FPM. This leads to very hi… --- ## [Fix HestiaCP Certificate Renewal Failure (v-update-letsencrypt-ssl errors): Patch v-generate-ssl-cert for OpenSSL 3.x Compatibility](https://forum.hestiacp.com/t/fix-hestiacp-certificate-renewal-failure-v-update-letsencrypt-ssl-errors-patch-v-generate-ssl-cert-for-openssl-3-x-compatibility/22350)
**Author:** [@yunli](https://forum.hestiacp.com/u/yunli)\ **Replies:** 16\ **Last updated:** [October 23, 2026, 11:06pm UTC](https://forum.hestiacp.com/t/fix-hestiacp-certificate-renewal-failure-v-update-letsencrypt-ssl-errors-patch-v-generate-ssl-cert-for-openssl-3-x-compatibility/22350 "2026-10-23T23:06:47Z")
If you run into an error while renewing a certificate with v-update-letsencrypt-ssl, modify v-generate-ssl-cert and try again. v-generate-ssl-cert script (full English version) #!/bin/bash # info: generate self signed c… --- ## [A single repository, multiple versions of PHP](https://forum.hestiacp.com/t/a-single-repository-multiple-versions-of-php/22351)
**Author:** [@josejad](https://forum.hestiacp.com/u/josejad)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 8:00pm UTC](https://forum.hestiacp.com/t/a-single-repository-multiple-versions-of-php/22351 "2026-10-23T20:00:45Z")
The team at my VPS provider (clouding.io) has compiled PHP versions ranging from 5.6 to 8.5 for Ubuntu and Debian into a single repository, all of which include the patches addressing the vulnerabilities known as php2she… [Next page](https://forum.hestiacp.com/latest.md?page=1)