cPanel AI and Blesta 6.0 Launch Major Control Panel Overhauls; cPanel Database Vulnerability Affects All Supported Versions
My Take
What happened cPanel announced cPanel AI, a suite of six AI features built into cPanel & WHM for resale under hosting providers' own brands, while Blesta shipped version 6.0 with a rebuilt admin interface and AI ticket automation.
Why it matters to hosts Control panel software is your operational backbone—if both major platforms are moving toward AI-driven features, you need to understand what's bundled, what it costs, and whether it's defensible in your market positioning or a race to the bottom.
What to do Review cPanel's AI pricing and resale terms, and test Blesta 6.0's admin rebuild and MRR analytics in a staging environment before deciding whether an upgrade serves your customer base or just raises your costs.
My view These launches feel like catching up to market expectation rather than innovation—hosting providers have been asking for better admin tooling and customer-facing automation for years. The real question isn't whether AI features exist, but whether they're mature enough to rely on and whether they solve a problem your customers will pay for. I'd be cautious about cPanel's bundled AI being a major selling point until we see real adoption stories from independent hosters.
If you're running cPanel or Blesta, are you planning to upgrade to these releases immediately, or are you waiting to see how existing customers respond first?
Key Themes
Notable Players
Announced cPanel AI suite with six bundled features (Meridian redesign and others) for resale under hosting provider brands; simultaneously disclosed CVE-2026-58048 database vulnerability affecting all supported versions.
Shipped version 6.0, called the biggest release in company history, with a rebuilt admin interface, AI-powered ticket autopilot, and native MRR analytics; replaced WHMCS with in-house billing console.
Enabled Patchstack npm vulnerability scanning by default on Business and Cloud plans on July 7, flagging 10,000 sites in weeks for dependency flaws in Node.js applications.
Returned to LowEndBox with a complete platform rebuild featuring OpenStack-powered cloud, hourly VMs, Kubernetes, developer tools, and in-house console replacing WHMCS.
Expanded into Indonesia as part of broader APAC push for AI infrastructure, signaling strategic shift toward regional sovereign compute capacity.
Top Stories
cPanel bundled six AI features into cPanel & WHM for hosting providers to resell under their own brands, including Meridian redesign and automation tools. Independent hosters need to evaluate resale economics and whether AI features differentiate their offering.
CVE-2026-58048 (Database Privilege Escalation) affects all supported cPanel versions and likely hits your servers already. Audit your estate and prioritize patching immediately.
Blesta shipped its biggest release with a complete admin interface rebuild, AI support ticket automation, and built-in recurring revenue analytics. For self-hosted billing users, this represents a significant operational upgrade with business intelligence tools baked in.
Hostinger's default npm dependency scanning via Patchstack flagged 10,000 sites in weeks for known vulnerabilities. If you host Node.js apps, understand that security scanning is now a baseline expectation and a competitive pressure point.
Virginia regulators now require data center developers to fund 100% of upstream grid infrastructure, shifting infrastructure costs away from ratepayers. This regulatory model will likely spread and reshape data center site selection economics nationwide.
Security & Compliance
EU and US regulations now demand demonstrated operational control and accountability over AI systems in production, not just compliant paperwork. Hosting providers serving European customers need documented operational control over customer AI workloads, not just infrastructure ownership.
Cloud & Infrastructure
RareCloud rebuilt its platform on OpenStack with an in-house console (replacing WHMCS), hourly billing cloud VMs, and managed Kubernetes. For hosters considering cloud offerings, this represents a playbook for modernizing legacy reseller infrastructure.
Cloudflare launched an open-source platform for building internal apps, automation, and secure system access. Hosting platforms can use this toolkit to reduce custom development for customer-facing automation and operational tooling.
Proxmox is porting to ARM architecture with Nvidia and Supermicro backing, positioning itself for AI datacenter workloads. Hosters running Proxmox should monitor ARM support for future cost and efficiency gains in GPU-heavy environments.
Pricing & Business
Key hosting industry deadlines and effective dates between now and January 2027 are already published. Map these dates into your roadmap and customer communication calendar now.
AMD reported record Q2 2026 revenue with data center business doubling YoY while consumer gaming cratered 31%. For hosters, this reinforces that enterprise compute demand is strong and pricing power favors suppliers, not customers.
Cloudflare gained Gartner Visionary status in both SASE and SSE categories, signaling market confidence in its security platform. This validates Cloudflare as a partner for hosting security stacks.
Control Panels
HestiaCP released version 1.99 as a security patch addressing vulnerabilities. Open-source control panel users should apply updates promptly to close gaps.
Technology & Tools
WordPress 7.1 RC1 is available for testing before final release. Hosters should test plugin compatibility on staging to identify breaking changes before your customer base upgrades.
WordPress 7.1 includes an accessibility improvement that may break plugins that modify admin screens. Alert popular plugin vendors and prepare customer communications about potential compatibility issues.
Next.js 16.3 cuts memory usage by 90% and improves error handling for Node.js hosting environments. If you support Next.js deployments, this release should improve stability and reduce support tickets.
Domains & DNS
Montenegro's .me registry generated €114 million between 2008 and 2025; the state wants to take back control, highlighting registry economics and government reclamation risk. Hosters reselling domains should monitor registry consolidation and policy shifts that could affect margins or availability.
Data Centers & Infrastructure
CoreWeave expanded into Indonesia to capture regional AI infrastructure demand. If you operate or partner with data centers, watch for capacity additions in APAC as GPU-hungry workloads migrate closer to customers.
Grid constraints and power queues are forcing data center developers to site facilities in unconventional locations. This reshapes competitive dynamics around latency and pricing for hosters relying on traditional hubs.
Multi-building gigawatt-scale campuses are becoming the norm for AI infrastructure driven by power economics and clustering. If you're evaluating colocation partners, size and power density are now table stakes.
A roundup of recent data center announcements through August. Scan for capacity additions, pricing trends, and geographic expansion relevant to your footprint.
Samsung and Mousterian are building a floating data center for Texas, though grid connection is uncertain due to state moratorium. Experimental cooling and siting models may eventually reduce cost, but regulatory risk remains.
Nashville's Metro Council approved mayoral seizure of land intended for a $700M data center through eminent domain, redirecting it for public use. Community opposition to data center siting is now credible enough to trigger regulatory takeover—factor local politics into expansion site selection.
The FCC is drafting restrictions on Chinese optical transceivers for data centers, citing security risk. Component sourcing and supply chain diversification are now national security policy—audit your hardware vendors' countries of origin.
Volta reported a $10B infrastructure deal with Anthropic for GPU capacity at a Norwegian facility. Hyperscaler investment in dedicated GPU farms underscores scarcity and pricing power for compute capacity.
AI & Machine Learning
Former Intel CEO Pat Gelsinger argues that GPU efficiency, not raw count, is the limiting factor for AI infrastructure. Hosters planning AI services should focus on power-efficient architectures and cooling innovation.
Frore's LiquidJet cooling claims 10°C temperature drops and 15% performance gains on Nvidia Rubin GPUs, attracting hyperscaler interest in delidded GPU production deployments. Advanced cooling is becoming a competitive lever for cost-per-token efficiency.
The Open Secure AI Alliance expects cloud and hosting providers to take a larger role in AI security, shifting focus from model builders. Hosters running customer AI workloads need security frameworks and operational controls ready.
Cloudflare is developing protocols for AI agents to be callable, discoverable, and payable on the open internet. Hosters should prepare platforms to support agent workloads alongside traditional applications.
Other News
Reports of Wholesale Internet service disruptions. If you depend on Wholesale Internet for transit or resale, monitor status pages for impact.