Vulnerabilities in CyberPanel

4 results

CVE-2021-47949HIGHCyberPanel 2.1 Authenticated Remote Code Execution via Symlink AttackEPSS 0.5%CVE-2026-29811HIGHCyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a primary domain; normalEPSS 0.3%CVE-2026-29810MEDIUMCyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.EPSS 0.3%CVE-2026-29812MEDIUMCyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list.EPSS 0.3%