Skip to content
OpenAdvisories
High WID-SEC-2026-2509 2 CVEs

CyberPanel: Mehrere Schwachstellen

Published Jul 23, 2026 · Updated Jul 23, 2026 · de-DE

Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in CyberPanel ausnutzen, um Sicherhetsmaßnahmen zu umgehen und Dateien zu manipulieren.

Product

CyberPanel ist ein Steuerungspanel für das Webhosting mit OpenLiteSpeed und LiteSpeed Enterprise.

Vulnerabilities 2

  • High 8.8
    CVE-2026-65917

    CyberPanel IncBackups IDOR via Sequential Backup ID

    CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference (IDOR) vulnerability in the IncBackups application's incremental-backup handlers (deleteBackup, fetchRestorePoints, and restorePoint) that allows authenticated pan…

    usmannasir cyberpanel
  • High 8.1
    CVE-2026-65916

    CyberPanel Missing Authorization in cancelBackupCreation Handler

    CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCreation handler that allows authenticated users to kill, delete, and corrupt other tenants' backups. Attackers can send crafted POST requests…

    usmannasir cyberpanel

Revision history

  1. #1

    Initiale Fassung

References