Read the docs

Hestia Control Panel

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Hestia Control Panel records in CISA KEV

No Hestia Control Panel vulnerabilities are listed in CISA KEV.

Records

1 record

Priority HIGH 72

Hestia Control Panel 1.3.2 contains an arbitrary file write vulnerability that allows authenticated attackers to write files to arbitrary locations using the API index.php endpoint.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.005 Published 2026-01-21 No fix listed CWE-73
Open these records in search →