Known Vulnerabilities for Control Panel by Hestiacp
Listed below are 10 of the newest known vulnerabilities associated with "Control Panel" by "Hestiacp".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109308 json | Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 passes the raw 'updates' request parameter in AppController::actionCac... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-109307 json | Craft CMS 5.0.0 before 5.10.14 contains a DOM-based cross-site scripting vulnerability in the control panel login and 2FA ver... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109306 json | Craft CMS from 5.0.0 before 5.10.14 contains a missing authorization vulnerability in AppController::actionSwitchToLicensedEd... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-108390 json | Hestia Control Panel is a lightweight and powerful control panel for the modern web. From version 1.9.7 through 1.10.4, updat... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-107578 json | Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer.exe ... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-105985 json | Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-com... | Not Provided | 2026-10-06 | 2026-10-07 |
| CVE-2026-92593 json | Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026-55794: the Controller::getPostedRedirectUrl(... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-92592 json | Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-controlled license-shun cookie... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-92590 json | Craft CMS versions from 5.7.0 before 5.10.13 contain a stored cross-site scripting vulnerability in the Generated Fields feat... | Not Provided | 2026-09-16 | 2026-09-19 |
| CVE-2026-92589 json | Craft CMS 5.0.0 through 5.10.12 (fixed in 5.10.13) contains a broken access control flaw in the nested-elements reorder endpo... | Not Provided | 2026-09-16 | 2026-09-18 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Hestiacp | Control Panel | 1.3.3 | |||
| Application | Hestiacp | Control Panel | 1.3.2 | |||
| Application | Hestiacp | Control Panel | 1.3.1 | |||
| Application | Hestiacp | Control Panel | 1.3.0 | |||
| Application | Hestiacp | Control Panel | 1.2.4 | |||
| Application | Hestiacp | Control Panel | 1.2.3 | |||
| Application | Hestiacp | Control Panel | 1.2.2 | |||
| Application | Hestiacp | Control Panel | 1.2.1 | |||
| Application | Hestiacp | Control Panel | 1.2.0 | |||
| Application | Hestiacp | Control Panel | 1.1.1 | |||
| Application | Hestiacp | Control Panel | 1.1.0 | |||
| Application | Hestiacp | Control Panel | 1.00.0-190618 | |||
| Application | Hestiacp | Control Panel | 1.0.6 | |||
| Application | Hestiacp | Control Panel | 1.0.5 | |||
| Application | Hestiacp | Control Panel | 1.0.4 | |||
| Application | Hestiacp | Control Panel | 1.0.3 | |||
| Application | Hestiacp | Control Panel | 1.0.1 | |||
| Application | Hestiacp | Control Panel | 0.9.8-28 | |||
| Application | Hestiacp | Control Panel | - |