CY
Vendor
Cyberpanel
13
CVEs
2
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-29812 | CY CyberPanel CyberPanel | 4.3 | Sep 13 | CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list |
| CVE-2026-29811 | CY CyberPanel CyberPanel | 7.7 | Sep 13 | CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a primary domain; normally spelled "alias") via an ORM query… |
| CVE-2026-29810 | CY CyberPanel CyberPanel | 4.3 | Sep 13 | CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic |
| CVE-2021-47949 | CY CyberPanel Cyberpanel | 8.8 | May 10 | CyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack |
| CVE-2026-41473 | CY Cyberpanel Cyberpanel | 9.1 | Apr 24 | CyberPanel < 2.4.5 Unauthenticated API Access via AI Scanner Endpoints |
| CVE-2026-41472 | CY Cyberpanel Cyberpanel | 6.1 | Apr 24 | CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard |
| CVE-2024-56112 | CY Cyberpanel Cyberpanel | 6.1 | Dec 16 | CyberPanel (aka Cyber Panel) before f0cf648 allows XSS via token or username to plogical/phpmyadminsignin.php |
| CVE-2024-53376 | CY Cyberpanel Cyberpanel | 8.8 | Dec 16 | CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the phpSelection field to the websites/submitWebsiteCreation… |
| CVE-2024-54679 | CY Cyberpanel Cyberpanel | 6.5 | Dec 5 | CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions |
| CVE-2024-51568 | CY Cyberpanel Cyberpanel | 9.8 | Oct 29 | CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner() sink |
| CVE-2024-51378 RansomwareIn wildKEV | CY Cyberpanel Cyberpanel | 9.8 | Oct 29 | CyberPanel Incorrect Default Permissions Vulnerability |
| CVE-2024-51567 RansomwareIn wildKEV | CY Cyberpanel Cyberpanel | 9.8 | Oct 29 | CyberPanel Incorrect Default Permissions Vulnerability |
| CVE-2019-13056 | CY Cyberpanel Cyberpanel | 8.8 | Jul 2 | An issue was discovered in CyberPanel through 1.8.4 |