Skip to content
OpenAdvisories

Vendor

usmannasir

11 known vulnerabilities.

Products

cyberpanel 11
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-87820

    CyberPanel 2.4.3 through 2.4.5 Information Disclosure via AI Scanner

    CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel admini…

    usmannasir cyberpanel
  • Medium 4.9
    CVE-2026-67613

    CyberPanel < 3.0.0 Path Traversal File Read via cloudAPI ReadReport

    CyberPanel before 3.0.0 contains a path traversal vulnerability that allows authenticated administrators to read arbitrary files from the server filesystem by supplying unsanitized file paths to the cloudAPI ReadReport endpoint. Attackers can manipulate the r…

    usmannasir cyberpanel
  • Medium 6.5
    CVE-2026-71964

    CyberPanel 2.4.3 Arbitrary File Read via File Manager ZIP Upload

    CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component that allows authenticated attackers to read sensitive system files by uploading a crafted ZIP archive containing symbolic links. Attackers c…

    usmannasir cyberpanel
  • Medium 5.3
    CVE-2026-41472 Public exploit

    CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard

    CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lacks authentication and allows unauthenticated attackers to inject malicious JavaScript by ove…

    usmannasir cyberpanel