Browse CVEs

CRITICAL 9.1 CVE-2026-41473 CyberPanel versions prior to 2.4.5 contain an authentication bypass vulnerability in the AI Scanner worker API endpoints that allows unauthenticated … Cyberpanel 2.4.4+ Fix from $2,3002026-04-24 MEDIUM 6.1 CVE-2026-41472 CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/cal… Cyberpanel 2.4.4+ Fix from $1,6002026-04-24 MEDIUM 6.1 CVE-2024-56112 CyberPanel (aka Cyber Panel) before f0cf648 allows XSS via token or username to plogical/phpmyadminsignin.php. Cyberpanel 2024-11-11+ Fix from $1,6002024-12-16 HIGH 8.8 CVE-2024-53376EPSS 11% CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the phpSelection field to the web… Cyberpanel 2.3.8+ Fix from $1,9502024-12-16 MEDIUM 6.5 CVE-2024-54679 CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions. Cyberpanel after 2.3.7 Fix from $1,6002024-12-05 CRITICAL 9.8 CVE-2024-51378 KEVEPSS 95% getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and e… Cyberpanel 2.3.8+ Fix from $2,3002024-10-29 CRITICAL 9.8 CVE-2024-51567 KEVEPSS 87% upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute … Cyberpanel 2.3.8+ Fix from $2,3002024-10-29 CRITICAL 9.8 CVE-2024-51568EPSS 45% CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner() sink. There is /filem… Cyberpanel 2.3.5+ Fix from $2,3002024-10-29 HIGH 8.8 CVE-2019-13056 An issue was discovered in CyberPanel through 1.8.4. On the user edit page, an attacker can edit the administrator's e-mail and password because of t… Cyberpanel after 1.8.4 Fix from $1,9502019-07-02