1Panel-dev vulnerabilities

CVEs per yearBy the year they were published

1. 20238
2. 202514
3. 20258
4. 202656

Newest CVEs

• CVE-2026-108705

  CordysCRM through 1.9.3 Missing Authorization via /custom-form/data/import

  1Panel-dev · CordysCRM

  Medium5.3
• CVE-2026-108704

  CordysCRM through 1.9.3 Authorization Bypass via Follow-Up Record Add Endpoints

  1Panel-dev · CordysCRM

  Medium5.3
• CVE-2026-108703

  CordysCRM through 1.9.3 Missing Authorization via /approval-resource/push

  1Panel-dev · CordysCRM

  Medium5.3
• CVE-2026-108702

  CordysCRM through 1.9.3 Missing Authorization and Blind SSRF via Webhook Test

  1Panel-dev · CordysCRM

  Medium5.3
• CVE-2026-108701

  1Panel-dev CordysCRM before 1.9.2 Missing Authorization via POST /contract/sort

  1Panel-dev · CordysCRM

  Medium5.3
• CVE-2026-108700

  1Panel-dev CordysCRM before 1.9.2 Missing Authorization via /field/source/business-title

  1Panel-dev · CordysCRM

  High7.1
• CVE-2026-108692

  1Panel-dev CordysCRM 1.9.0 before 1.9.2 Missing Authorization via /field/source Endpoints

  1Panel-dev · CordysCRM

  High7.1
• CVE-2026-79919

  MaxKB function-library sandbox escape: dlopen stack-check bypass via importlib meta-path callbacks and unhooked dlsym(RTLD_NEXT)

  1Panel-dev · MaxKB

  Medium6.3
• CVE-2026-79918

  MaxKB: Sandbox escape via unhooked fexecve

  1Panel-dev · MaxKB

  Medium6.3
• CVE-2026-77517

  MaxKB cross-knowledge IDOR lets a normal user read and modify documents and paragraphs in another knowledge base

  1Panel-dev · MaxKB

  Medium5.4