What’s Vulnerable › Products

Ctrlpanel-gg panel vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Ctrlpanel-gg panel version is affected

Latest Ctrlpanel-gg panel vulnerabilities

• CVE-2026-34358 — CtrlPanel: Missing Authorization on Admin Write Endpoints Allows RBAC Bypass (CVSS 8.1)
• CVE-2026-34246 — CtrlPanel: Stored XSS in Admin Role Management via Unescaped DataTable HTML Output (CVSS 4.8)
• CVE-2026-34241 — CtrlPanel: Stored XSS in Ticket Reply Notifications Allows Session Hijacking (CVSS 8.7)
• CVE-2026-34234 — CtrlPanel: Unauthenticated RCE using installer script (CVSS 10.0)
• CVE-2026-34233 — CtrlPanel has Missing Authentication Checks in Datatable Admin Endpoints (CVSS 6.5)
• CVE-2026-34216 — CtrlPanel: Authenticated Remote Code Execution via Dynamic Class Instantiation in SettingsController.php (CVSS 6.6)
• CVE-2025-25203 — Ctrlpanel has stored XSS vulnerability in TicketsController priority field (CVSS 8.1)