Skip to content
OpenAdvisories

Vendor

Ctrlpanel-gg

7 known vulnerabilities.

Products

panel 7
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-34246

    CtrlPanel: Stored XSS in Admin Role Management via Unescaped DataTable HTML Output

    CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability exists in the admin role management interface. In app/Http/Controllers/Admin/RoleController.php, the datatable(…

    Ctrlpanel-gg panel
  • Medium 6.5
    CVE-2026-34233

    CtrlPanel has Missing Authentication Checks in Datatable Admin Endpoints

    CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, multiple admin controllers expose DataTable endpoints without authorization checks, allowing any authenticated user to access sensitive administrative data that shou…

    Ctrlpanel-gg panel
  • Medium 6.6
    CVE-2026-34216

    CtrlPanel: Authenticated Remote Code Execution via Dynamic Class Instantiation in SettingsController.php

    CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, the admin settings update endpoint accepted a fully qualified class name directly from user-supplied request input and used it for dynamic static method calls and ob…

    Ctrlpanel-gg panel