FI
Vendor
Fit2cloud
78
CVEs
0
On KEV
0
New 30D
Products
JU9.9
Jumpserver
Fit2cloud
24 CVEs0 on KEV0 new
1P9.8
1panel
Fit2cloud
21 CVEs0 on KEV0 new
CL9.8
Cloudexplorer Lite
Fit2cloud
9 CVEs0 on KEV0 new
SQ8.8
Sqlbot
Fit2cloud
8 CVEs0 on KEV0 new
KU9.8
Kubepi
Fit2cloud
5 CVEs0 on KEV0 new
HA6.5
Halo
fit2cloud
4 CVEs0 on KEV0 new
CL4.3
Cloudexplorer
Fit2cloud
2 CVEs0 on KEV0 new
CC9.8
Cordys Crm
Fit2cloud
1 CVEs0 on KEV0 new
KO9.9
Koko
Fit2cloud
1 CVEs0 on KEV0 new
KU9.8
Kubeoperator
Fit2cloud
1 CVEs0 on KEV0 new
LI5.4
Lina
Fit2cloud
1 CVEs0 on KEV0 new
RA9.8
Rackshift
Fit2cloud
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-42463 | SQ Sqlbot Fit2cloud | 8.1 | May 13 | SQLBot: Unauthorized Access Vulnerability |
| CVE-2026-33324 | SQ Sqlbot Fit2cloud | 8.8 | May 5 | SQLBot prompt injection allows arbitrary SQL execution and remote code execution |
| CVE-2026-32950 | SQ Sqlbot Fit2cloud | 8.8 | Mar 20 | SQLBot: RCE via SQL Injection in Excel Upload Endpoint |
| CVE-2026-32949 | SQ Sqlbot Fit2cloud | 7.5 | Mar 20 | SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL |
| CVE-2026-32622 | SQ Sqlbot Fit2cloud | 8.8 | Mar 19 | SQLBot: Remote Code Execution via Terminology Poisoning |
| CVE-2026-31864 | JU Jumpserver Fit2cloud | 6.8 | Mar 13 | JumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering |
| CVE-2026-31798 | JU Jumpserver Fit2cloud | 5.0 | Mar 13 | JumpServer Improper Certificate Validation in Custom SMS API Client |
| CVE-2025-15598 | SQ Sqlbot Fit2cloud | 5.9 | Mar 3 | Dataease SQLBot JWT Token auth.py validateEmbedded signature verification |
| CVE-2025-15597 | SQ Sqlbot Fit2cloud | 6.3 | Mar 2 | Dataease SQLBot API Endpoint assistant.py access control |
| CVE-2025-70981 | CC Cordys Crm Fit2cloud | 9.8 | Feb 12 | CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter |
| CVE-2025-69285 | SQ Sqlbot Fit2cloud | 6.1 | Jan 21 | SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability |
| CVE-2026-23525 | 1P 1panel Fit2cloud | 8.4 | Jan 18 | 1panel App Store vulnerable to Cross-site Scripting |
| CVE-2025-34429 | 1P 1panel Fit2cloud | 7.1 | Dec 10 | 1Panel CSRF Web Port Configuration Change |
| CVE-2025-34430 | 1P 1panel Fit2cloud | 4.3 | Dec 10 | 1Panel CSRF Panel Name Modification |
| CVE-2025-34410 | 1P 1panel Fit2cloud | 7.1 | Dec 10 | 1Panel CSRF in Change Username Functionality Allows Account Lockout |
| CVE-2025-66508 | 1P 1panel Fit2cloud | 6.5 | Dec 9 | 1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers |
| CVE-2025-66507 | 1P 1panel Fit2cloud | 7.5 | Dec 9 | 1Panel – CAPTCHA Bypass via Client-Controlled Flag |
| CVE-2025-14117 | HA Halo fit2cloud | 6.5 | Dec 6 | fit2cloud Halo cross-site request forgery |
| CVE-2025-58044 | JU Jumpserver Fit2cloud | 6.1 | Dec 1 | JumpServer has an Open Redirect Vulnerability |
| CVE-2025-62795 | JU Jumpserver Fit2cloud | 7.1 | Oct 30 | JumpServer Unauthorized LDAP Configuration Access via WebSocket |
| CVE-2025-62712 | JU Jumpserver Fit2cloud | 8.1 | Oct 30 | JumpServer Connection Token Leak Vulnerability |
| CVE-2025-56413 | 1P 1panel Fit2cloud | 8.8 | Sep 10 | OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing attackers to execute arbitrary commands via the operation parameter to the… |
| CVE-2025-54424 | 1P 1panel Fit2cloud | 9.8 | Aug 1 | 1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution |
| CVE-2025-27095 | JU Jumpserver Fit2cloud | 4.3 | Mar 31 | JumpServer has a Kubernetes Token Leak Vulnerability |
| CVE-2024-40629 | JU Jumpserver Fit2cloud | 9.8 | Jul 18 | JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and… |
| CVE-2024-40628 | JU Jumpserver Fit2cloud | 9.1 | Jul 18 | JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and… |
| CVE-2024-39911 | 1P 1panel Fit2cloud | 9.8 | Jul 18 | 1Panel is a web-based linux server management control panel |
| CVE-2024-39907 | 1P 1panel Fit2cloud | 9.8 | Jul 18 | 1Panel is a web-based linux server management control panel |
| CVE-2024-34352 | 1P 1panel Fit2cloud | 7.5 | May 14 | 1Panel is an open source Linux server operation and maintenance management panel |
| CVE-2024-30257 | 1P 1panel Fit2cloud | 5.9 | Apr 18 | 1Panel is an open source Linux server operation and maintenance management panel |
| CVE-2024-29202 | JU Jumpserver Fit2cloud | 9.9 | Mar 29 | JumpServer is an open source bastion host and an operation and maintenance security audit system |
| CVE-2024-29201 | JU Jumpserver Fit2cloud | 9.9 | Mar 29 | JumpServer is an open source bastion host and an operation and maintenance security audit system |
| CVE-2024-29024 | JU Jumpserver Fit2cloud | 5.3 | Mar 29 | JumpServer is an open source bastion host and an operation and maintenance security audit system |
| CVE-2024-29020 | JU Jumpserver Fit2cloud | 5.3 | Mar 29 | JumpServer is an open source bastion host and an operation and maintenance security audit system |
| CVE-2024-2352 | 1P 1panel Fit2cloud | 9.8 | Mar 10 | A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts |
| CVE-2024-27288 | 1P 1panel Fit2cloud | 3.1 | Mar 6 | 1Panel is an open source Linux server operation and maintenance management panel |
| CVE-2024-24763 | JU Jumpserver Fit2cloud | 6.1 | Feb 20 | JumpServer is an open source bastion host and an operation and maintenance security audit system |
| CVE-2024-24768 | 1P 1panel Fit2cloud | 7.5 | Feb 5 | 1Panel is an open source Linux server operation and maintenance management panel |
| CVE-2023-50612 | CL Cloudexplorer Lite Fit2cloud | 7.8 | Jan 6 | Insecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local attackers to escalate privileges and obtain sensitive information via the cloud… |
| CVE-2023-48193 | JU Jumpserver Fit2cloud | 9.8 | Nov 28 | Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via bypassing the command filtering function |
| CVE-2023-46138 | JU Jumpserver Fit2cloud | 5.3 | Oct 31 | JumpServer is an open source bastion host and maintenance security audit system that complies with 4A specifications |
| CVE-2023-44397 | CL Cloudexplorer Lite Fit2cloud | 9.8 | Oct 30 | CloudExplorer Lite is an open source, lightweight cloud management platform |
| CVE-2023-46123 | JU Jumpserver Fit2cloud | 5.3 | Oct 25 | jumpserver is an open source bastion machine, professional operation and maintenance security audit system that complies with 4A specifications |
| CVE-2023-43651 | JU Jumpserver Fit2cloud | 9.9 | Sep 27 | JumpServer is an open source bastion host |
| CVE-2023-42818 | JU Jumpserver Fit2cloud | 9.8 | Sep 27 | JumpServer is an open source bastion host |
| CVE-2023-43652 | JU Jumpserver Fit2cloud | 9.1 | Sep 27 | JumpServer is an open source bastion host |
| CVE-2023-43650 | JU Jumpserver Fit2cloud | 7.4 | Sep 27 | JumpServer is an open source bastion host |
| CVE-2023-42820 | JU Jumpserver Fit2cloud | 8.2 | Sep 27 | JumpServer is an open source bastion host |
| CVE-2023-42819 | JU Jumpserver Fit2cloud | 8.8 | Sep 27 | JumpServer is an open source bastion host |
| CVE-2023-42147 | CL Cloudexplorer Lite Fit2cloud | 7.5 | Sep 20 | An issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the login key component |
| CVE-2023-42442 | JU Jumpserver Fit2cloud | 5.3 | Sep 15 | JumpServer is an open source bastion host and a professional operation and maintenance security audit system |
| CVE-2023-42405 | RA Rackshift Fit2cloud | 9.8 | Sep 14 | SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the `sort` parameter to taskService.list(), bareMetalService.list(), and… |
| CVE-2023-39519 | CL Cloudexplorer Lite Fit2cloud | 4.9 | Aug 24 | Cloud Explorer Lite is an open source cloud management platform |
| CVE-2023-39966 | 1P 1panel Fit2cloud | 9.8 | Aug 10 | 1Panel is an open source Linux server operation and maintenance management panel |
| CVE-2023-39965 | 1P 1panel Fit2cloud | 4.3 | Aug 10 | 1Panel is an open source Linux server operation and maintenance management panel |
| CVE-2023-39964 | 1P 1panel Fit2cloud | 7.5 | Aug 10 | 1Panel is an open source Linux server operation and maintenance management panel |
| CVE-2023-38692 | CL Cloudexplorer Lite Fit2cloud | 9.8 | Aug 4 | CloudExplorer Lite is an open source, lightweight cloud management platform |
| CVE-2023-37917 | KU Kubepi Fit2cloud | 8.8 | Jul 21 | KubePi is an opensource kubernetes management panel |
| CVE-2023-37916 | KU Kubepi Fit2cloud | 7.5 | Jul 21 | KubePi is an opensource kubernetes management panel |
| CVE-2023-37477 | 1P 1panel Fit2cloud | 8.8 | Jul 18 | 1Panel is an open source Linux server operation and maintenance management panel |
