Read the docs

1Panel-dev

Records146All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical30CVSS 9.0–10.0
CVSS high43CVSS 7.0–8.9

Exploited now

1Panel-dev records in CISA KEV

No 1Panel-dev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jumpserver 24 records HIGH 1panel 21 records HIGH Cloudexplorer Lite 9 records HIGH Sqlbot 8 records HIGH Kubepi 5 records CRITICAL Halo 4 records MEDIUM Cloudexplorer 2 records MEDIUM Cordys Crm 1 record HIGH

Records

21 records in 1panel · all components

TI-2024-26801 CVE-2024-39907 · GHSA-5grx-v727-qmq6

a sqlinjection in 1Panel

Priority HIGH 82

1Panel is a web-based linux server management control panel.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.29183 Published 2024-07-18 Fixed in 1.10.12-tls CWE-89
TI-2024-02187 CVE-2024-2352 · GHSA-x2vg-5wrf-vj6v

1Panel swap baseApi.UpdateDeviceSwap command injection

Priority HIGH 75

A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03044 Published 2024-03-10 Fixed in 1.10.1-lts CWE-77
TI-2024-22692 CVE-2024-34352 · GHSA-f8ch-w75v-c847

Arbitrary file write vulnerability in 1Panel

Priority HIGH 68

1Panel is an open source Linux server operation and maintenance management panel.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01329 Published 2024-05-09 Fixed in 1.10.3-lts CWE-77
TI-2024-16285 CVE-2024-24768 · GHSA-9xfw-jjq2-7v8h

1Panel set-cookie is missing the Secure keyword

Priority HIGH 66

1Panel is an open source Linux server operation and maintenance management panel.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00304 Published 2024-02-05 Fixed in 1.9.6 CWE-315
TI-2023-20858 CVE-2023-39965 · GHSA-85cf-gj29-f555

1Panel Unauthorized access in Backend

Priority MEDIUM 62

1Panel is an open source Linux server operation and maintenance management panel.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00441 Published 2023-08-10 Fixed in 1.5.0 CWE-863
TI-2024-26805 CVE-2024-39911

1Panel SQL injection

Priority MEDIUM 56

1Panel is a web-based linux server management control panel.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.04528 Published 2024-07-18 Fixed in 1.10.12-lts CWE-89
TI-2025-40929 CVE-2025-66507 · GHSA-qmg5-v42x-qqhq

1Panel – CAPTCHA Bypass via Client-Controlled Flag

Priority LOW 39

1Panel is an open-source, web-based control panel for Linux server management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00463 Published 2025-12-09 Fixed in 2.0.14, 0.0.0-20251128030527-ac43f00273be CWE-290
TI-2025-24501 CVE-2025-34429 · GHSA-wrvc-x3wf-j5f5

1Panel CSRF Web Port Configuration Change

Priority LOW 30

1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality.

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00177 Published 2025-12-10 No fix listed CWE-352
TI-2025-24486 CVE-2025-34410 · GHSA-rpr2-4hqj-hc4q

1Panel CSRF in Change Username Functionality Allows Account Lockout

Priority LOW 30

1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings panel (/settings/panel).

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00157 Published 2025-12-10 No fix listed CWE-352
TI-2025-24502 CVE-2025-34430 · GHSA-5xpq-2vmc-5cqp

1Panel CSRF Panel Name Modification

Priority LOW 23

1Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the panel name management functionality.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00211 Published 2025-12-10 No fix listed CWE-352
Open these records in search →