Live › vulnerability › CVE-2026-116371
Go to dashboardAkuvox Akubela HyPanel PS51 version 51.130.40.26 has a weakness in its /login handler where manipulating the engrmode argument with the value admin leads to improper authentication. The sources say an attacker can trigger it remotely, and the vendor did not respond to early disclosure.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 17:31 UTC. All times on this page are UTC.
Teams running Akuvox Akubela HyPanel PS51 at version 51.130.40.26 with a web login reachable from the network are the ones exposed. The sources do not state which deployments or configurations are affected beyond that version; systems not running this build or not exposing the login page are unlikely to be affected.
No product ranges from the sources yet.
51.130.40.26 of HyPanel PS51 (the version is shown in the admin interface; exact location unknown)/login on the HyPanel web interface accepts an engrmode parameter set to admin (unknown from sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function of the file /login. Executing a manipulation of the argument engrmode with the input admin can lead to improper authentication. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-116371")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.