CCtrlpanel-gg

Products

Exploited and recent CVEs

• CVE-2026-34358 High 8.1 CtrlPanel: Missing Authorization on Admin Write Endpoints Allows RBAC Bypass 0.3%
• CVE-2026-34246 Medium 4.8 CtrlPanel: Stored XSS in Admin Role Management via Unescaped DataTable HTML Output 0.2%
• CVE-2026-34241 High 8.7 CtrlPanel: Stored XSS in Ticket Reply Notifications Allows Session Hijacking 0.3%
• CVE-2026-34234 Critical 10.0 CtrlPanel: Unauthenticated RCE using installer script 3.2%
• CVE-2026-34233 Medium 6.5 CtrlPanel has Missing Authentication Checks in Datatable Admin Endpoints 0.3%
• CVE-2026-34216 Medium 6.6 CtrlPanel: Authenticated Remote Code Execution via Dynamic Class Instantiation in SettingsController.php 0.5%
• CVE-2025-25203 High 8.1 Ctrlpanel has stored XSS vulnerability in TicketsController priority field 0.4%