EUVD-2026-77074
GHSA-vfv6-g6x5-rcp8
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Requires authenticated low-privilege network session; impact is confidentiality-only (domain info disclosure); no integrity, availability, or scope change.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
3DescriptionCVE.org
CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.
AnalysisAI
CyberPanel before version 2.4.4 contains a logic omission in the checkOwnership() access control function that allows authenticated low-privilege users to bypass domain ownership verification. The plogical/acl.py module's checkOwnership() function lacked a return 0 in its denial branch, causing it to implicitly return None instead of an explicit denial signal when a requesting user does not own the target domain. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid CyberPanel account with at least low-level (non-admin) privileges - unauthenticated access is not possible per the PR:L CVSS metric. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) accurately reflects the constrained risk profile: network-reachable but authentication-gated, with impact limited strictly to information disclosure. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade CyberPanel to version 2.4.4 or later, which incorporates the fix at https://github.com/usmannasir/cyberpanel/commit/0a099b1b193946555fbdd387a28486b1521f9961. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Cyberpanel
View allgetresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers t
upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypas
CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecut
Command injection in CyberPanel 2.4.3's remote backup transfer feature allows authenticated low-privileged users to exec
Unauthenticated database writes in CyberPanel versions before 2.4.4 allow remote attackers to abuse two AI Scanner worke
CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the
An issue was discovered in CyberPanel through 1.8.4. Rated high severity (CVSS 8.8), this vulnerability is remotely expl
Authenticated remote code execution in CyberPanel 2.4.3 allows any logged-in user to escalate to persistent root-level S
CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files an
Arbitrary file read in CyberPanel 2.4.3's file manager allows authenticated panel users to escape their home-directory s
CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner callback and status-update endpoints that retu
CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions. R
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today