1Panel-dev 1Panel vulnerabilities

CVEs per yearBy the year they were published

1. 20236
2. 20246
3. 20253
4. 20261

Newest CVEs

• CVE-2026-23525

  1panel App Store vulnerable to Cross-site Scripting

  1Panel-dev · 1Panel

  Medium6.4
• CVE-2025-66508

  1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers

  1Panel-dev · 1Panel

  Medium6.5
• CVE-2025-66507

  1Panel – CAPTCHA Bypass via Client-Controlled Flag

  1Panel-dev · 1Panel

  High7.5
• CVE-2025-54424

  1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution

  1Panel-dev · 1Panel

  High8.1
• CVE-2024-39911

  1Panel SQL injection

  1Panel-dev · 1Panel

  Critical10.0
• CVE-2024-39907

  a sqlinjection in 1Panel

  1Panel-dev · 1Panel

  Critical9.8
• CVE-2024-34352

  Arbitrary file write vulnerability in 1Panel

  1Panel-dev · 1Panel

  Medium6.5
• CVE-2024-30257

  1Panel's password verification is suspected to have a timing attack vulnerability

  1Panel-dev · 1Panel

  Low3.9
• CVE-2024-27288

  1Panel open source panel project has an unauthorized vulnerability.

  1Panel-dev · 1Panel

  Medium6.3
• CVE-2024-24768

  1Panel set-cookie is missing the Secure keyword

  1Panel-dev · 1Panel

  Medium6.5