Login Request a demo
1P
Product
1panel
by Fit2cloud · last CVE Jan 18, 2026
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 5High 11Medium 4Low 1
Severity
All severities21Critical5High11Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add 1panel to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-56413
8.8
1%
Sep 10
OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing attackers to execute arbitrary commands via the operation parameter to the…
Affected: 2.0.8
CVE-2023-37477
8.8
6%
Jul 18
1Panel is an open source Linux server operation and maintenance management panel
Affected: before 1.4.3
CVE-2023-36458
8.8
2%
Jul 5
1Panel is an open source Linux server operation and maintenance management panel
Affected: before 1.3.6
CVE-2023-36457
8.8
2%
Jul 5
1Panel is an open source Linux server operation and maintenance management panel
Affected: before 1.3.6
CVE-2026-23525
8.4
0%
Jan 18
1panel App Store vulnerable to Cross-site Scripting
Affected: before 1.10.34; 2.0.0 before 2.0.17
CVE-2025-66507
7.5
0%
Dec 9
1Panel – CAPTCHA Bypass via Client-Controlled Flag
Affected: before 2.0.14
CVE-2024-34352
7.5
1%
May 14
1Panel is an open source Linux server operation and maintenance management panel
Affected: before 1.10.3-lts
CVE-2024-24768
7.5
0%
Feb 5
1Panel is an open source Linux server operation and maintenance management panel
Affected: 1.9.5
CVE-2023-39964
7.5
1%
Aug 10
1Panel is an open source Linux server operation and maintenance management panel
Affected: 1.4.3
CVE-2025-34429
7.1
0%
Dec 10
1Panel CSRF Web Port Configuration Change
Affected: 1.10.33-lts through 2.0.15
CVE-2025-34410
7.1
0%
Dec 10
1Panel CSRF in Change Username Functionality Allows Account Lockout
Affected: 1.10.33-lts through 2.0.15
Showing 11