Product by Usmannasir
Cyberpanel
11 known vulnerabilities in Cyberpanel (Usmannasir), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-71966 | CyberPanel 2.4.3 Authenticated Command Injection via starRemoteTransfer | 8.8 | |
| Critical | CVE-2026-67614 | CyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal | 9.8 | |
| High | CVE-2026-88895 | CyberPanel before 3.0.5 Authentication Bypass via API | 7.2 | |
| Medium | CVE-2026-87820 | CyberPanel 2.4.3 through 2.4.5 Information Disclosure via AI Scanner | 5.3 | |
| Critical | CVE-2026-41473 | CyberPanel < 2.4.5 Unauthenticated API Access via AI Scanner Endpoints | 9.1 | |
| High | CVE-2026-65917 | CyberPanel IncBackups IDOR via Sequential Backup ID | 8.8 | |
| High | CVE-2026-71965 | CyberPanel 2.4.3 Authenticated RCE via Remote Backup Feature | 8.8 | |
| High | CVE-2026-65916 | CyberPanel Missing Authorization in cancelBackupCreation Handler | 8.1 | |
| Medium | CVE-2026-67613 | CyberPanel < 3.0.0 Path Traversal File Read via cloudAPI ReadReport | 4.9 | |
| High | CVE-2026-71964 | CyberPanel 2.4.3 Arbitrary File Read via File Manager ZIP Upload | 6.5 | |
| Medium | CVE-2026-41472 | CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard | 6.1 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,