CVE Watch—

CVE-2024-51378

CyberPanel Incorrect Default Permissions Vulnerability

CVSS

—

No CVSS

EPSS

94.8%

p100

KEV

YES

Dec 4, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

94.8%EPSS · 30 days94.9%

2026-06-302026-07-16

KEV catalog record

Product

CyberPersons / CyberPanel

Vulnerability

CyberPanel Incorrect Default Permissions Vulnerability

Added to KEV

Dec 4, 2024

Remediate by

Dec 25, 2024

Known ransomware use

Yes

Summary description

CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary commands using shell metacharacters in the statusfile property.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://cyberpanel.net/KnowledgeBase/home/change-logs/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-51378

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2024-51567—

99.7%

KEV—80CyberPanel Incorrect Default Permissions Vulnerability—