CVE-2026-71965

CyberPanel 2.4.3 contains an authenticated remote code execution vulnerability in the remote backup feature. An authenticated attacker can abuse unverified SSH public key retrieval to write a malicious key to /root/.ssh/authorized_keys, gaining root SSH access. The flaw is fixed in commit eca0c3c...