1Panel-dev 1Panel

• CVE-2026-23525 Medium 6.4 1panel App Store vulnerable to Cross-site Scripting 0.4%
• CVE-2025-66508 Medium 6.5 1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers 0.3%
• CVE-2025-66507 High 7.5 1Panel – CAPTCHA Bypass via Client-Controlled Flag 0.5%
• CVE-2025-54424 High 8.1 1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution 1.1%
• CVE-2024-39911 Critical 10.0 1Panel SQL injection 4.5%
• CVE-2024-39907 Critical 9.8 a sqlinjection in 1Panel 29.2%
• CVE-2024-34352 Medium 6.5 Arbitrary file write vulnerability in 1Panel 1.3%
• CVE-2024-30257 Low 3.9 1Panel's password verification is suspected to have a timing attack vulnerability 0.4%
• CVE-2024-27288 Medium 6.3 1Panel open source panel project has an unauthorized vulnerability. 0.5%
• CVE-2024-24768 Medium 6.5 1Panel set-cookie is missing the Secure keyword 0.3%
• CVE-2023-39966 High 7.5 1Panel arbitrary file write vulnerability exists in the background 0.8%
• CVE-2023-39965 Medium 6.5 1Panel Unauthorized access in Backend 0.4%
• CVE-2023-39964 High 7.5 1Panel O&M management panel has a background arbitrary file reading vulnerability 1.0%
• CVE-2023-37477 High 7.2 Command injection in firewall ip functionality in 1Panel 5.8%
• CVE-2023-36457 Medium 6.3 1Panel vulnerable to command injection when adding container repositories 2.3%
• CVE-2023-36458 Medium 6.3 1Panel vulnerable to ommand injection when entering the container terminal 2.3%