Lucene search
+L

6 matches found

OSV
OSV
•added 2026/09/16 8:32 p.m.•22 views

CVE-2026-92762 Pelican Panel before 1.0.0-beta35 Authorization Bypass via Startup

Pelican Panel versions before 1.0.0-beta35 enforce startup write permissions only through disabled form controls rather than server-side authorization checks. Attackers with startup.read permission can craft Livewire state updates to invoke afterStateUpdated callbacks and modify startup commands,...

8.7CVSS6.2AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/09/16 8:32 p.m.•16 views

EUVD-2026-81030

Pelican Panel versions before 1.0.0-beta35 enforce startup write permissions only through disabled form controls rather than server-side authorization checks. Attackers with startup.read permission can craft Livewire state updates to invoke afterStateUpdated callbacks and modify startup commands,...

8.8CVSS6.4AI score0.00654EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•5 views

CVE-2026-92762: Missing Authorization

Pelican Panel versions before 1.0.0-beta35 enforce startup write permissions only through disabled form controls rather than server-side authorization checks. Attackers with startup.read permission can craft Livewire state updates to invoke afterStateUpdated callbacks and modify startup commands,...

8.8CVSS6.4AI score0.00654EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•6 views

PT-2026-94044

Name of the Vulnerable Software and Affected Versions Pelican Panel versions prior to 1.0.0-beta35 Description Startup write permissions are enforced only through disabled form controls instead of server-side authorization checks. An attacker with startup.read permission can craft Livewire state...

8.8CVSS6.1AI score0.00654EPSS
SaveExploits0References7
Snyk
Snyk
•added 2026/06/22 11:19 p.m.•17 views

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the recordSelectOptionsQuery method. An attacker can bypass intended access restrictions by tampering with the Livewire component's state and submitting out-of-scope values in the Sele...

7.1CVSS5.8AI score0.00299EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/22 11:19 p.m.•127 views

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the recordSelectOptionsQuery method. An attacker can bypass intended access restrictions by tampering with the Livewire component's state and submitting out-of-scope values in the Sele...

7.1CVSS5.8AI score0.00299EPSS
SaveExploits0References2
Rows per page
Query Builder