Known Vulnerabilities for Panel by Ctrlpanel-gg
Listed below are 10 of the newest known vulnerabilities associated with "Panel" by "Ctrlpanel-gg".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-71274 json | OpenBK7231T's CHANNEL_SetLabel() (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel comma... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-70376 json | Pluck CMS's admin panel relies solely on a Referer-header comparison (requestedByTheSameDomain() in data/inc/functions.admin.... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-66418 json | OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers t... | Not Provided | 2026-07-30 | 2026-07-31 |
| CVE-2026-65917 json | CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference (IDOR) vulnerability in the I... | Not Provided | 2026-07-23 | 2026-07-27 |
| CVE-2026-65603 json | The Grav Login plugin (grav-plugin-login) versions <= 3.8.11 contain a privilege escalation flaw in the authenticated profile... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-65048 json | Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticated stored cross-site scripting vulne... | Not Provided | 2026-07-21 | 2026-07-21 |
| CVE-2026-65007 json | The Grav api plugin (grav-plugin-api) before 1.0.8 fails to properly authorize API key generation and revocation: the plugin ... | Not Provided | 2026-07-21 | 2026-07-23 |
| CVE-2026-63092 json | kirby-modules through 5.5.7, fixed in commit 315417e, contains an information disclosure vulnerability that allows any authen... | Not Provided | 2026-07-21 | 2026-07-23 |
| CVE-2026-61609 json | Pterodactyl is a free, open-source game server management panel. From 1.7.0 until 1.13.0, the authentication rate limiter def... | Not Provided | 2026-07-28 | 2026-07-28 |
| CVE-2026-61501 json | Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administration panel as HTML without sanitization. A remote unauth... | Not Provided | 2026-07-13 | 2026-07-14 |