CVE-2024-51567
KEV · RansomwareCyberPanel Incorrect Default Permissions Vulnerability
View CVE record →- Vendor / Project
- CyberPersons
- Product
- CyberPanel
- Date added
- Nov 7, 2024
- Due date
- Nov 28, 2024
- Known ransomware use
- Known
- CWEs
- CWE-276
Description
CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as root.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.