Read the docs
TI-2026-23385 Aliases CVE-2026-29812GHSA-35w8-hjmq-qcx9

CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list.

Priority LOW 20CWE-778Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00277 20th percentileScored 2026-11-07
Fix Fixed CyberPanel (CyberPanel): 2.4.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CyberPanelCyberPanelbefore 2.4.42.4.4Patch availableCNA
  • CyberPanel VendorCyberPanel Affected before 2.4.4 Fixed in 2.4.4 Patch available CNA

Remediation

  • Fix · CNA CyberPanel (CyberPanel) Fixed in 2.4.4

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    CyberPanel 2.4.4

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2026-23384 CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that…Priority LOW 34
    • TI-2026-23383 CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.Priority LOW 20
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-29812
  2. 2026-10-03 Alias added: GHSA-35w8-hjmq-qcx9

References

Other 1

  • TI-2024-34482 upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6… KEVCVSS 3.1CRITICAL 10.0
  • TI-2024-34345 getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before… KEVCVSS 3.1CRITICAL 10.0
  • TI-2026-30062 CyberPanel < 2.4.5 Unauthenticated API Access via AI Scanner Endpoints CVSS 4.0HIGH 8.8
  • TI-2024-34483 CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in… CVSS 3.1CRITICAL 10.0
  • TI-2024-35785 CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands… CVSS 3.1HIGH 8.8
  • TI-2021-22562 CyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack CVSS 4.0HIGH 8.7
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences