CVE-2026-50980

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-28 · updated 2026-09-09
Weakness: CWE-79

Description

Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record

References

http://osbil.com
http://womopanel.com
https://github.com/bugresearch/CVE-2026-50980
https://github.com/bugresearch/CVE-2026-50980

Get alerted when CVE-2026-50980 or the next vulnerability affects your stack