Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: usmannasir cyberpanel 3.0.0 Clear all filters
TI-2026-47767 CVE-2026-67613 · GHSA-3x24-fvrh-w27x

CyberPanel < 3.0.0 Path Traversal File Read via cloudAPI ReadReport

Priority LOW 31

CyberPanel before 3.0.0 contains a path traversal vulnerability that allows authenticated administrators to read arbitrary files from the server filesystem by supplying unsanitized file paths to the cloudAPI ReadReport e…

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00498 Published 2026-08-13 Fixed in 3.0.0 CWE-22
TI-2026-47768 CVE-2026-67614 · GHSA-jr78-52g9-xcm6

CyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal

Priority MEDIUM 50

CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive ro…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00964 Published 2026-08-13 Fixed in 3.0.0 CWE-798