Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: usmannasir cyberpanel 2.4.5 Clear all filters
TI-2026-30062 CVE-2026-41473 · GHSA-xvg9-fp4q-jq9w

CyberPanel < 2.4.5 Unauthenticated API Access via AI Scanner Endpoints

Priority HIGH 79

CyberPanel versions prior to 2.4.5 contain an authentication bypass vulnerability in the AI Scanner worker API endpoints that allows unauthenticated remote attackers to write arbitrary data to the database by sending req…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00793 Published 2026-04-24 Fixed in 2.4.5 CWE-306
TI-2026-30061 CVE-2026-41472 · GHSA-7jgx-wx3x-3fp3

CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard

Priority MEDIUM 57

CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lacks authentication and allows unauthenticated attacker…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00516 Published 2026-04-24 Fixed in 2.4.5 CWE-79