Summary
Ein Angreifer kann mehrere Schwachstellen in CyberPanel ausnutzen, um Informationen offenzulegen, um Sicherheitsvorkehrungen zu umgehen, und um beliebigen Programmcode mit Administratorrechten auszuführen.
Product
CyberPanel ist ein Steuerungspanel für das Webhosting mit OpenLiteSpeed und LiteSpeed Enterprise.
Vulnerabilities 2
-
Critical 9.8
CyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal
CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive root shell via WebSocket on port 8888. At…
-
Medium 4.9
CyberPanel < 3.0.0 Path Traversal File Read via cloudAPI ReadReport
CyberPanel before 3.0.0 contains a path traversal vulnerability that allows authenticated administrators to read arbitrary files from the server filesystem by supplying unsanitized file paths to the cloudAPI ReadReport endpoint. Attackers can manipulate the r…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2026-08-13
https://github.com/advisories/GHSA-3X24-FVRH-W27X
-
GitHub Advisory Database vom 2026-08-13
https://github.com/advisories/GHSA-JR78-52G9-XCM6