Skip to content
OpenAdvisories

Vendor

MythicalLTD

2 known vulnerabilities.

Products

FeatherPanel 1 MythicalDash 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-54608

    MythicalDash: Unauthenticated payment bypass in Stripe success-redirect endpoint allows arbitrary free credit top-up

    MythicalDash is a Pterodactyl client area. In 3.5.4-aurora and earlier, GET /api/stripe/process in backend/app/Api/System/Gateways/Stripe.php creates a pending row in mythicaldash_stripe_payments before Stripe checkout succeeds and embeds the payment code in …

    MythicalLTD MythicalDash
  • High 8.8
    CVE-2026-84715

    FeatherPanel before 1.3.7.10 Privilege Escalation via Subuser Permission Update

    FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController updateSubuser handler, allowing authenticated subusers to modify their own permission records. A subuser with minimal permissions can send a crafted request to grant t…

    MythicalLTD FeatherPanel