PT-2026-39523

Name of the Vulnerable Software and Affected Versions CyberPanel version 2.1 Description Authenticated attackers can read arbitrary files and execute remote code by exploiting symlink attacks. By manipulating the completeStartingPath parameter in POST requests to the "/filemanager/controller"...

CVE-2021-47949: Improper Link Resolution Before File Access

CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink attacks through the filemanager controller endpoint. Attackers can manipulate the completeStartingPath parameter in POST requests to...