Dashboard / CVE-2024-51378

CVE-2024-51378

CISA KEV RANSOMWARE
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary commands using shell metacharacters in the statusfile property.

CISA Known Exploited Vulnerability

Vendor / Product CyberPersons — CyberPanel
Date Added 2024-12-04
Remediation Due 2024-12-25
Ransomware Use CONFIRMED
https://cyberpanel.net/KnowledgeBase/home/change-logs/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-51378

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
cyberpanel cyberpanel < 2.3.8

References & Advisories (8)

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

94.75%
Raw Score 0.947480
Percentile 99.9%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links