Product by 1Panel-dev
1Panel
16 known vulnerabilities in 1Panel (1Panel-dev), 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-39907 | a sqlinjection in 1Panel | 9.8 | |
| Critical | CVE-2024-39911 | 1Panel SQL injection | 10.0 | |
| High | CVE-2023-37477 | Command injection in firewall ip functionality in 1Panel | 7.2 | |
| High | CVE-2023-36457 | 1Panel vulnerable to command injection when adding container repositories | 6.3 | |
| High | CVE-2023-36458 | 1Panel vulnerable to ommand injection when entering the container terminal | 6.3 | |
| Critical | CVE-2025-54424 | 1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution | 8.1 | |
| High | CVE-2024-34352 | Arbitrary file write vulnerability in 1Panel | 6.5 | |
| High | CVE-2023-39964 | 1Panel O&M management panel has a background arbitrary file reading vulnerability | 7.5 | |
| Critical | CVE-2023-39966 | 1Panel arbitrary file write vulnerability exists in the background | 7.5 | |
| High | CVE-2025-66507 | 1Panel – CAPTCHA Bypass via Client-Controlled Flag | 7.5 | |
| High | CVE-2026-23525 | 1panel App Store vulnerable to Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-27288 | 1Panel: Incorrect Authorization | 6.3 | |
| Medium | CVE-2023-39965 | 1Panel Unauthorized access in Backend | 6.5 | |
| Medium | CVE-2025-66508 | 1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers | 6.5 | |
| High | CVE-2024-24768 | 1Panel set-cookie is missing the Secure keyword | 6.5 | |
| Medium | CVE-2024-30257 | 1Panel's password verification is suspected to have a timing attack vulnerability | 3.9 |