Vulnerabilidades em 1Panel-dev

57 resultados
Análise Vexday

Com 53 CVEs catalogadas e nenhuma registrada no catálogo KEV da CISA, o 1Panel-dev apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere pressão ofensiva ainda limitada — embora 6 vulnerabilidades já contem com PoC pública, elevando o risco de aproveitamento oportunista. O volume de 23 falhas surgidas nos últimos 90 dias indica ritmo acelerado de descoberta recente, exigindo atenção contínua ao ciclo de patching. O tipo de falha predominante é CWE-79 (Cross-Site Scripting), padrão que frequentemente viabiliza ataques de injeção de conteúdo e sequestro de sessão em interfaces web. A CVE mais crítica no momento é CVE-2024-39907, com escore EPSS de 0,294, valor que a posiciona entre as de maior probabilidade de exploração no portfólio e que deve ser priorizada em qualquer ciclo de remediação.

CVE-2024-39907CRITICALa sqlinjection in 1Panel EPSS 29.2%CVE-2024-36111MEDIUMKubePi's JWT token validation has a defectEPSS 8.4%CVE-2023-37477HIGHCommand injection in firewall ip functionality in 1PanelEPSS 5.8%CVE-2024-39911CRITICAL1Panel SQL injectionEPSS 4.5%CVE-2023-36457MEDIUM1Panel vulnerable to command injection when adding container repositoriesEPSS 2.3%CVE-2023-36458MEDIUM1Panel vulnerable to ommand injection when entering the container terminalEPSS 2.3%CVE-2024-34352MEDIUMArbitrary file write vulnerability in 1Panel EPSS 1.3%CVE-2026-6108MEDIUM1Panel-dev MaxKB Model Context Protocol Node base_mcp_node.py execute os command injectionEPSS 1.3%CVE-2025-54424HIGH1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command ExecutionEPSS 0.9%CVE-2023-39964HIGH1Panel O&M management panel has a background arbitrary file reading vulnerabilityEPSS 0.8%CVE-2023-37916MEDIUMLeak password hash of any userEPSS 0.8%CVE-2024-56137MEDIUMMaxKB RCE vulnerability in function libraryEPSS 0.8%CVE-2023-37917CRITICALPrivilege Escalation in kubepiEPSS 0.7%CVE-2023-39966HIGH1Panel arbitrary file write vulnerability exists in the backgroundEPSS 0.7%CVE-2025-4546MEDIUM1Panel-dev MaxKB Knowledge Base Module csv injectionEPSS 0.6%CVE-2026-39420MEDIUMMaxKB: Sandbox escape via LD_PRELOAD bypassEPSS 0.5%CVE-2024-27288MEDIUM1Panel open source panel project has an unauthorized vulnerability.EPSS 0.5%CVE-2025-66507HIGH1Panel – CAPTCHA Bypass via Client-Controlled FlagEPSS 0.5%CVE-2025-53928MEDIUMMaxKB has RCE in MCP callEPSS 0.4%CVE-2025-48950MEDIUMMaxKB Python Sandbox Bypass in Function LibraryEPSS 0.4%