Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

21 records

Vendor: 1Panel-dev Component: 1panel Clear all filters
TI-2025-24501 CVE-2025-34429 · GHSA-wrvc-x3wf-j5f5

1Panel CSRF Web Port Configuration Change

Priority LOW 30

1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality.

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00177 Published 2025-12-10 No fix listed CWE-352
TI-2025-24502 CVE-2025-34430 · GHSA-5xpq-2vmc-5cqp

1Panel CSRF Panel Name Modification

Priority LOW 23

1Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the panel name management functionality.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00211 Published 2025-12-10 No fix listed CWE-352
TI-2025-24486 CVE-2025-34410 · GHSA-rpr2-4hqj-hc4q

1Panel CSRF in Change Username Functionality Allows Account Lockout

Priority LOW 30

1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings panel (/settings/panel).

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00157 Published 2025-12-10 No fix listed CWE-352
TI-2025-40929 CVE-2025-66507 · GHSA-qmg5-v42x-qqhq

1Panel – CAPTCHA Bypass via Client-Controlled Flag

Priority LOW 39

1Panel is an open-source, web-based control panel for Linux server management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00463 Published 2025-12-09 Fixed in 2.0.14, 0.0.0-20251128030527-ac43f00273be CWE-290
TI-2024-26805 CVE-2024-39911

1Panel SQL injection

Priority MEDIUM 56

1Panel is a web-based linux server management control panel.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.04528 Published 2024-07-18 Fixed in 1.10.12-lts CWE-89
TI-2024-26801 CVE-2024-39907 · GHSA-5grx-v727-qmq6

a sqlinjection in 1Panel

Priority HIGH 82

1Panel is a web-based linux server management control panel.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.29183 Published 2024-07-18 Fixed in 1.10.12-tls CWE-89
TI-2024-22692 CVE-2024-34352 · GHSA-f8ch-w75v-c847

Arbitrary file write vulnerability in 1Panel

Priority HIGH 68

1Panel is an open source Linux server operation and maintenance management panel.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01329 Published 2024-05-09 Fixed in 1.10.3-lts CWE-77
TI-2024-02187 CVE-2024-2352 · GHSA-x2vg-5wrf-vj6v

1Panel swap baseApi.UpdateDeviceSwap command injection

Priority HIGH 75

A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03044 Published 2024-03-10 Fixed in 1.10.1-lts CWE-77
TI-2024-16285 CVE-2024-24768 · GHSA-9xfw-jjq2-7v8h

1Panel set-cookie is missing the Secure keyword

Priority HIGH 66

1Panel is an open source Linux server operation and maintenance management panel.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00304 Published 2024-02-05 Fixed in 1.9.6 CWE-315
TI-2023-20858 CVE-2023-39965 · GHSA-85cf-gj29-f555

1Panel Unauthorized access in Backend

Priority MEDIUM 62

1Panel is an open source Linux server operation and maintenance management panel.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00441 Published 2023-08-10 Fixed in 1.5.0 CWE-863