EUVD-2026-77076
GHSA-35w8-hjmq-qcx9
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Requires authenticated panel session (PR:L) over network; limited integrity impact on domain list state only; no confidentiality or availability effect warranting C:N and A:N.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list.
AnalysisAI
CyberPanel versions before 2.4.4 fail to record audit log entries when authenticated panel users interact with the child domains management interface, allowing configuration manipulation to proceed without any forensic trail. The upstream fix commit also reveals a companion access-control defect: a missing return path in the ACL ownership check (checkOwnership() in acl.py) and an ORM filter regression in fetchChildDomainsMain that broadened the child domain result set beyond intended alias-excluded entries. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid authenticated session on the CyberPanel web interface, as confirmed by the CVSS PR:L metric - anonymous internet access is insufficient. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The NVD CVSS score of 4.3 Medium accurately reflects network-accessible, low-complexity exploitation requiring authenticated (PR:L) access with limited integrity impact and no confidentiality or availability effect. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade CyberPanel to version 2.4.4 or later, which incorporates the upstream fix at commit 0a099b1b193946555fbdd387a28486b1521f9961 (https://github.com/usmannasir/cyberpanel/commit/0a099b1b193946555fbdd387a28486b1521f9961). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Cyberpanel
View allgetresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers t
upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypas
CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecut
Command injection in CyberPanel 2.4.3's remote backup transfer feature allows authenticated low-privileged users to exec
Unauthenticated database writes in CyberPanel versions before 2.4.4 allow remote attackers to abuse two AI Scanner worke
CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the
An issue was discovered in CyberPanel through 1.8.4. Rated high severity (CVSS 8.8), this vulnerability is remotely expl
Authenticated remote code execution in CyberPanel 2.4.3 allows any logged-in user to escalate to persistent root-level S
CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files an
Arbitrary file read in CyberPanel 2.4.3's file manager allows authenticated panel users to escape their home-directory s
CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner callback and status-update endpoints that retu
CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions. R
Same weakness CWE-778 – Insufficient Logging
View allShare
External POC / Exploit Code
Leaving vuln.today