[deanhills]

I don't know how bad this vulnerability is but in many cases if you have your server hardened properly you can stay safe. @deanhills has been using VestaCP for a long time. I wonder if his servers are also effected.

Actually I haven't been affected yet, that doesn't make me invulnerable though.  It's a reality that can happen at any time.  When it does, you'll probably hear about it, as I'd imagine it will hurt enough to want to write plenty of posts about it.

I've got a theory though for the reason I've been OK until now.  I don't use all of the features of the VestaCP installer.  Like I don't use the FTP or Mail features.  For me those two in particular are the areas where hacking occurs most.  The e-mail clients that are offered are leaky at best.  Other reason could be that people don't have their VestaCP on automatic updates.  Although maybe when it gets to updates, those updates seem to be lagging behind the hacking events taking place.  It's almost too late for an update by the time the event has happened.  Not that I'm critical, like this is a free panel with guys putting in voluntary service.  I'm just very grateful to be able to use it for free.

I've just checked cPanel cost for VPS again.  14US$ per month.  Wow!  That is more than for a VPS!