Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in CyberPanel ausnutzen, um Daten zu manipulieren oder sensible Informationen offenzulegen.
Product
CyberPanel ist ein Steuerungspanel für das Webhosting mit OpenLiteSpeed und LiteSpeed Enterprise.
Vulnerabilities 3
-
High 7.7
CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a p…
-
Medium 4.3
CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.
-
Medium 4.3
CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list.
Revision history
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2026-09-13
https://github.com/advisories/GHSA-VFV6-G6X5-RCP8
-
GitHub Advisory Database vom 2026-09-13
https://github.com/advisories/GHSA-2M73-7WXP-874W
-
GitHub Advisory Database vom 2026-09-13
https://github.com/advisories/GHSA-35W8-HJMQ-QCX9
-
EU Vulnerability Databse vom 2026-09-13
https://euvd.enisa.europa.eu/enisa/EUVD-2026-77074
-
EU Vulnerability Databse vom 2026-09-13
https://euvd.enisa.europa.eu/enisa/EUVD-2026-77075
-
EU Vulnerability Databse vom 2026-09-13
https://euvd.enisa.europa.eu/enisa/EUVD-2026-77076