Cyberpanel vulnerabilities

Products

• Cyberpanel 22

Newest

• cyberpanel CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child... CVE-2026-29812 4.3 MediumSeptember 13, 2026
• cyberpanel CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves... CVE-2026-29811 7.7 HighSeptember 13, 2026
• cyberpanel CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic. CVE-2026-29810 4.3 MediumSeptember 13, 2026
• cyberpanel CyberPanel before 3.0.5 Authentication Bypass via API CVE-2026-88895 8.6 HighSeptember 10, 2026
• cyberpanel CyberPanel 2.4.3 through 2.4.5 Information Disclosure via AI Scanner CVE-2026-87820 6.9 MediumSeptember 9, 2026
• cyberpanel CyberPanel < 3.0.0 Path Traversal File Read via cloudAPI ReadReport CVE-2026-67613 6.9 MediumAugust 13, 2026
• cyberpanel CyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal CVE-2026-67614 9.3 CriticalAugust 13, 2026
• cyberpanel CyberPanel 2.4.3 Authenticated Command Injection via starRemoteTransfer CVE-2026-71966 8.7 HighAugust 10, 2026
• cyberpanel CyberPanel 2.4.3 Authenticated RCE via Remote Backup Feature CVE-2026-71965 8.7 HighAugust 10, 2026
• cyberpanel CyberPanel 2.4.3 Arbitrary File Read via File Manager ZIP Upload CVE-2026-71964 7.1 HighAugust 10, 2026
• cyberpanel CyberPanel IncBackups IDOR via Sequential Backup ID CVE-2026-65917 8.7 HighJuly 23, 2026
• cyberpanel CyberPanel Missing Authorization in cancelBackupCreation Handler CVE-2026-65916 7.2 HighJuly 23, 2026
• cyberpanel CyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack CVE-2021-47949 8.7 HighMay 10, 2026
• cyberpanel CyberPanel < 2.4.5 Unauthenticated API Access via AI Scanner Endpoints CVE-2026-41473 Public exploit 8.8 HighApril 24, 2026
• cyberpanel CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard CVE-2026-41472 Public exploit 5.3 MediumApril 24, 2026
• cyberpanel CyberPanel (aka Cyber Panel) before f0cf648 allows XSS via token or username to plogical... CVE-2024-56112 6.1 MediumDecember 16, 2024
• cyberpanel CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell... CVE-2024-53376 Public exploit EPSS 10.9% 8.8 HighDecember 16, 2024
• cyberpanel CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for... CVE-2024-54679 Public exploit 4.3 MediumDecember 5, 2024
• cyber panel panel, cyberpanel +1 more CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the... CVE-2024-51568 Public exploit EPSS 47.7% 10.0 CriticalOctober 29, 2024
• cyberpanel upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows... CVE-2024-51567 In KEVPublic exploit EPSS 84.4% 10.0 CriticalOctober 29, 2024
• cyberpanel getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb... CVE-2024-51378 In KEVPublic exploit EPSS 94.7% 10.0 CriticalOctober 29, 2024
• cyberpanel An issue was discovered in CyberPanel through 1.8.4. On the user edit page, an attacker can edit... CVE-2019-13056 8.8 HighJuly 2, 2019