Live › vulnerability › CVE-2024-51567
Go to dashboardCyberPanel, a web hosting control panel, has an incorrect default permissions flaw that lets an unauthenticated remote attacker run commands as root. CISA lists it as actively exploited, including in ransomware campaigns.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| CyberPersons CyberPanel | vendor | – | – |
| cyberpanel | vendor | < 2.3.8 | 2.3.8 |
Unknown from the sources.
Apply the vendor mitigations per CISA guidance, or stop using CyberPanel if no mitigation exists; affected and fixed versions are not stated in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.
This page as .md · .json · in your agent: get_signal("CVE-2024-51567")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.