Skip to content
OpenAdvisories

Vendor

Openpanel-dev

32 known vulnerabilities.

Products

openpanel 32
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-85612 Public exploit

    OpenPanel before 2.3.0 SSRF via favicon and og endpoints

    OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the /misc/favicon and /misc/og endpoints that accept an attacker-supplied url parameter with insufficient validation. Attackers can force the API to fetch arbitrar…

    Openpanel-dev openpanel