Ctrlpanel-gg vulnerabilities
7 published CVEs name Ctrlpanel-gg among the affected products.
- 7Published CVEs7 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-34358
CtrlPanel: Missing Authorization on Admin Write Endpoints Allows RBAC Bypass
Ctrlpanel-gg · panel
High8.1 - CVE-2026-34246
CtrlPanel: Stored XSS in Admin Role Management via Unescaped DataTable HTML Output
Ctrlpanel-gg · panel
Medium4.8 - CVE-2026-34241
CtrlPanel: Stored XSS in Ticket Reply Notifications Allows Session Hijacking
Ctrlpanel-gg · panel
High8.7 - CVE-2026-34234
CtrlPanel: Unauthenticated RCE using installer script
Ctrlpanel-gg · panel
Critical10.0 - CVE-2026-34233
CtrlPanel has Missing Authentication Checks in Datatable Admin Endpoints
Ctrlpanel-gg · panel
Medium6.5 - CVE-2026-34216
CtrlPanel: Authenticated Remote Code Execution via Dynamic Class Instantiation in SettingsController.php
Ctrlpanel-gg · panel
Medium6.6 - CVE-2025-25203
Ctrlpanel has stored XSS vulnerability in TicketsController priority field
Ctrlpanel-gg · panel
High8.1