Vulnerabilities

TI-2026-26644 CVE-2026-34358

CtrlPanel: Missing Authorization on Admin Write Endpoints Allows RBAC Bypass

HIGH 68

CtrlPanel is open-source billing software for hosting providers.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00297 Published 2026-05-19 Fixed in 1.2.0 CWE-284

TI-2026-26541 CVE-2026-34246

LOW 21

CtrlPanel is open-source billing software for hosting providers.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00216 Published 2026-05-19 Fixed in 1.2.0 CWE-116

TI-2026-26536 CVE-2026-34241

HIGH 73

CtrlPanel is open-source billing software for hosting providers.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00349 Published 2026-05-19 Fixed in 1.2.0 CWE-79

TI-2026-26529 CVE-2026-34234

HIGH 82

CtrlPanel is open-source billing software for hosting providers.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03243 Published 2026-05-19 Fixed in 1.2.0 CWE-284

TI-2026-26528 CVE-2026-34233

LOW 29

CtrlPanel is open-source billing software for hosting providers.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0028 Published 2026-05-19 Fixed in 1.2.0 CWE-284

TI-2026-26511 CVE-2026-34216

MEDIUM 64

CtrlPanel is open-source billing software for hosting providers.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00532 Published 2026-05-19 Fixed in 1.2.0 CWE-470

TI-2025-18872 CVE-2025-25203

HIGH 70

CtrlPanel is open-source billing software for hosting providers.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00441 Published 2025-02-11 Fixed in 1.0 CWE-79