coldbraid

CVE-2024-51378 CyberPersons CyberPanel

CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary commands using shell metacharacters in the statusfile property.

CVSS
not scored

CWE-276

On CISA’s exploited list

CyberPanel Incorrect Default Permissions Vulnerability

Added
2024-12-04
Federal patch deadline
2024-12-25
Ransomware use
known