ClosedCriticalPatched
Day · Nov 7, 2024
CyberPersons CyberPanel: 2 actively exploited vulnerabilities
CyberPersons CyberPanel
Updates on Nov 7, 2024
CISA added CVE-2024-51567 to the KEV catalog (federal deadline 2024-11-28)
Source
Summary
CVE-2024-51567: CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as root. CVE-2024-51378: CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary commands using shell metacharacters in the statusfile property. Added to the CISA KEV catalog on 2024-11-07, 2024-12-04. CISA lists known use in ransomware campaigns.
Read the full incident →
