Login Request a demo
CY
Product
cyberpanel
by usmannasir · last CVE Sep 10, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 2High 5Medium 4Low 0
Severity
All severities11Critical2High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add cyberpanel to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-67614
9.8
1%
Aug 13
CyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal
Affected: before 3.0.0
CVE-2026-41473
9.1
1%
Apr 24
CyberPanel < 2.4.5 Unauthenticated API Access via AI Scanner Endpoints
Affected: before 2.4.5
CVE-2026-71966
8.8
3%
Aug 10
CyberPanel 2.4.3 Authenticated Command Injection via starRemoteTransfer
Affected: through 2.4.3
CVE-2026-71965
8.8
0%
Aug 10
CyberPanel 2.4.3 Authenticated RCE via Remote Backup Feature
Affected: through 2.4.3
CVE-2026-65917
8.8
1%
Jul 23
CyberPanel IncBackups IDOR via Sequential Backup ID
Affected: through 1.9.1
CVE-2026-65916
8.1
0%
Jul 23
CyberPanel Missing Authorization in cancelBackupCreation Handler
Affected: through 1.9.1
CVE-2026-88895
7.2
1%
Sep 10
CyberPanel before 3.0.5 Authentication Bypass via API
Affected: before 3.0.5
CVE-2026-71964
6.5
0%
Aug 10
CyberPanel 2.4.3 Arbitrary File Read via File Manager ZIP Upload
Affected: through 2.4.3
CVE-2026-41472
6.1
1%
Apr 24
CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard
Affected: before 2.4.5
CVE-2026-87820
5.3
1%
Sep 9
CyberPanel 2.4.3 through 2.4.5 Information Disclosure via AI Scanner
Affected: 2.4.3 before 2.4.6
CVE-2026-67613
4.9
0%
Aug 13
CyberPanel < 3.0.0 Path Traversal File Read via cloudAPI ReadReport
Affected: before 3.0.0
Showing 11