4.3Media
CyberPanel CyberPanel
CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list.
Vulnerabilidades de cyberpanel (CVE)
Registros CVE publicados para cyberpanel, los más recientes primero. Siga el producto para recibir un correo con cada nueva.
7.7Alta
CyberPanel CyberPanel
CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a primary domain; normally spelled "alias") via an ORM query filter rather than a Python "if" statement.
4.3Media
CyberPanel CyberPanel
CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.
7.2Alta
CyberPanel before 3.0.5 Authentication Bypass via API
usmannasir cyberpanel
CyberPanel before 3.0.5 fails to enforce two-factor authentication on API endpoints, allowing attackers to bypass TOTP requirements using password-derived tokens. Attackers who obtain an administrator's password can derive API tokens and perform administrativ…
5.3Media
CyberPanel 2.4.3 through 2.4.5 Information Disclosure via AI Scanner
usmannasir cyberpanel
CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel admini…
4.9Media
CyberPanel < 3.0.0 Path Traversal File Read via cloudAPI ReadReport
usmannasir cyberpanel
CyberPanel before 3.0.0 contains a path traversal vulnerability that allows authenticated administrators to read arbitrary files from the server filesystem by supplying unsanitized file paths to the cloudAPI ReadReport endpoint. Attackers can manipulate the r…
9.8Crítica
CyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal
usmannasir cyberpanel
CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive root shell via WebSocket on port 8888. At…
8.8Alta
CyberPanel 2.4.3 Authenticated Command Injection via starRemoteTransfer
usmannasir cyberpanel
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated command injection vulnerability in the remote backup transfer feature that allows authenticated attackers to execute arbitrary OS commands by controlling a remote server's API response. Atta…
3.3%EPSS
8.8Alta
CyberPanel 2.4.3 Authenticated RCE via Remote Backup Feature
usmannasir cyberpanel
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote backup feature that allows authenticated attackers to gain root-level SSH access by supplying a malicious remote server address. Attackers c…
6.5Media
CyberPanel 2.4.3 Arbitrary File Read via File Manager ZIP Upload
usmannasir cyberpanel
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component that allows authenticated attackers to read sensitive system files by uploading a crafted ZIP archive containing symbolic links. Attackers c…
8.8Alta
CyberPanel IncBackups IDOR via Sequential Backup ID
usmannasir cyberpanel
CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference (IDOR) vulnerability in the IncBackups application's incremental-backup handlers (deleteBackup, fetchRestorePoints, and restorePoint) that allows authenticated pan…
8.1Alta
CyberPanel Missing Authorization in cancelBackupCreation Handler
usmannasir cyberpanel
CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCreation handler that allows authenticated users to kill, delete, and corrupt other tenants' backups. Attackers can send crafted POST requests…
8.8Alta
CyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack
Cyberpanel CyberPanel
CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink attacks through the filemanager controller endpoint. Attackers can manipulate the completeStart…
8.8Alta
CyberPanel < 2.4.5 Unauthenticated API Access via AI Scanner Endpoints
usmannasir cyberpanel
CyberPanel versions prior to 2.4.5 contain an authentication bypass vulnerability in the AI Scanner worker API endpoints that allows unauthenticated remote attackers to write arbitrary data to the database by sending requests to the /api/ai-scanner/status-web…
5.3Media
CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard
usmannasir cyberpanel
CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lacks authentication and allows unauthenticated attackers to inject malicious JavaScript by ove…
10.0Crítica
CyberPanel Incorrect Default Permissions Vulnerability
cyberpanel cyberpanel
upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST requ…
84%EPSS
10.0Crítica
CyberPanel Incorrect Default Permissions Vulnerability
cyberpanel cyberpanel
getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware (which is …
95%EPSS