Priority HIGH 82
CtrlPanel is open-source billing software for hosting providers.
Ctrlpanel-gg
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Ctrlpanel-gg records in CISA KEVNo Ctrlpanel-gg vulnerabilities are listed in CISA KEV.
Records
7 records
TI-2026-26536 CVE-2026-34241
CtrlPanel: Stored XSS in Ticket Reply Notifications Allows Session Hijacking
Priority HIGH 73
CtrlPanel is open-source billing software for hosting providers.
TI-2025-18872 CVE-2025-25203
Ctrlpanel has stored XSS vulnerability in TicketsController priority field
Priority HIGH 70
CtrlPanel is open-source billing software for hosting providers.
TI-2026-26644 CVE-2026-34358
CtrlPanel: Missing Authorization on Admin Write Endpoints Allows RBAC Bypass
Priority HIGH 68
CtrlPanel is open-source billing software for hosting providers.
TI-2026-26511 CVE-2026-34216
CtrlPanel: Authenticated Remote Code Execution via Dynamic Class Instantiation in SettingsController.php
Priority MEDIUM 64
CtrlPanel is open-source billing software for hosting providers.
TI-2026-26528 CVE-2026-34233
CtrlPanel has Missing Authentication Checks in Datatable Admin Endpoints
Priority LOW 29
CtrlPanel is open-source billing software for hosting providers.
TI-2026-26541 CVE-2026-34246
CtrlPanel: Stored XSS in Admin Role Management via Unescaped DataTable HTML Output
Priority LOW 21
CtrlPanel is open-source billing software for hosting providers.