← Database

CVE-2024-51568

CRITICAL CVSS: 10.0 Published: 2024-10-29 Modified: 2026-06-17

Description

CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner() sink. There is /filemanager/upload (aka File Manager upload) unauthenticated remote code execution via shell metacharacters.

Affected Platforms

Cyberpanel Cyberpanel

Weakness Type

CWE-78

References