CY
Product
CyberPanel
On CISA KEVExploited in the wildRansomware-linked
13
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 5Low 0
Watch
Add CyberPanel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-54679 | 6.5 | Dec 5 | CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions Affected: through 2.3.7 |
| CVE-2026-41472 | 6.1 | Apr 24 | CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard Affected: before 2.4.4 |
| CVE-2024-56112 | 6.1 | Dec 16 | CyberPanel (aka Cyber Panel) before f0cf648 allows XSS via token or username to plogical/phpmyadminsignin.php Affected: before 2024-11-11 |
| CVE-2026-29810 | 4.3 | Sep 13 | CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic Affected: before 2.4.4 |
| CVE-2026-29812 | 4.3 | Sep 13 | CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list Affected: before 2.4.4 |
Showing 5