Vulnerabilidades en 1Panel-dev
86 resultadosCVE-2026-77519MEDIUMMaxKB: Expired application API keys remain usable on `/chat/api/mcp`EPSS 0.2%CVE-2026-108700HIGH1Panel-dev CordysCRM before 1.9.2 Missing Authorization via /field/source/business-titleEPSS 0.2%CVE-2026-108692HIGH1Panel-dev CordysCRM 1.9.0 before 1.9.2 Missing Authorization via /field/source EndpointsEPSS 0.2%CVE-2026-10567MEDIUM1Panel-dev CordysCRM ModuleFormController ModuleFormService.java save cross site scriptingEPSS 0.2%CVE-2026-42335MEDIUMMaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing DiscrepancyEPSS 0.2%CVE-2026-77517MEDIUMMaxKB cross-knowledge IDOR lets a normal user read and modify documents and paragraphs in another knowledge baseEPSS 0.2%CVE-2026-77520MEDIUMMaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's applicationEPSS 0.2%CVE-2026-108702MEDIUMCordysCRM through 1.9.3 Missing Authorization and Blind SSRF via Webhook TestEPSS 0.2%CVE-2026-39419LOWMaxKB: Sandbox Result Validation Bypass via Tool Output SpoofingEPSS 0.2%CVE-2026-108704MEDIUMCordysCRM through 1.9.3 Authorization Bypass via Follow-Up Record Add EndpointsEPSS 0.2%CVE-2025-64511HIGHMaxKB has SSRF in sandboxEPSS 0.2%CVE-2026-39422MEDIUMMaxKB has Stored XSS via ChatHeadersMiddlewareEPSS 0.2%CVE-2026-6107MEDIUM1Panel-dev MaxKB ChatHeadersMiddleware chat_headers_middleware.py cross site scriptingEPSS 0.2%CVE-2025-64703MEDIUMMaxKB has Information Leak in sandboxEPSS 0.2%CVE-2026-42337MEDIUMMaxKB: Broken Access Control in MaxKB OSS URL Fetch APIEPSS 0.2%CVE-2026-45412MEDIUMMaxKB: Unauthenticated SSRF via Workflow Template ImportEPSS 0.2%CVE-2026-42336MEDIUMMaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL FetchEPSS 0.2%CVE-2026-39418MEDIUMMaxKB: SSRF via sandbox network hook bypassEPSS 0.2%CVE-2026-108701MEDIUM1Panel-dev CordysCRM before 1.9.2 Missing Authorization via POST /contract/sortEPSS 0.2%CVE-2026-108705MEDIUMCordysCRM through 1.9.3 Missing Authorization via /custom-form/data/importEPSS 0.2%