Skip to contentUsmannasir Cyberpanel vulnerabilities
- cyberpanelCyberPanel before 3.0.5 Authentication Bypass via APICVE-2026-888958.6 High
- cyberpanelCyberPanel 2.4.3 through 2.4.5 Information Disclosure via AI ScannerCVE-2026-878206.9 Medium
- cyberpanelCyberPanel < 3.0.0 Path Traversal File Read via cloudAPI ReadReportCVE-2026-676136.9 Medium
- cyberpanelCyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminalCVE-2026-676149.3 Critical
- cyberpanelCyberPanel 2.4.3 Authenticated Command Injection via starRemoteTransferCVE-2026-719668.7 High
- cyberpanelCyberPanel 2.4.3 Authenticated RCE via Remote Backup FeatureCVE-2026-719658.7 High
- cyberpanelCyberPanel 2.4.3 Arbitrary File Read via File Manager ZIP UploadCVE-2026-719647.1 High
- cyberpanelCyberPanel IncBackups IDOR via Sequential Backup IDCVE-2026-659178.7 High
- cyberpanelCyberPanel Missing Authorization in cancelBackupCreation HandlerCVE-2026-659167.2 High
- cyberpanelCyberPanel < 2.4.5 Unauthenticated API Access via AI Scanner EndpointsCVE-2026-41473Public exploit8.8 High
- cyberpanelCyberPanel < 2.4.5 Stored XSS via AI Scanner DashboardCVE-2026-41472Public exploit5.3 Medium