Ctrlpanel-gg - vulnerabilities (CVEs)

7 CVEs in 1 products, 0 in the last 30 days, newest from 2026-05-19.

Products

CVE-2026-34358 - CVSS 8.1 (high), 2026-05-19: CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contains a broken access control vulnerability where multiple admin…
CVE-2026-34246 - CVSS 4.8 (medium), 2026-05-19: CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability exists in…
CVE-2026-34241 - CVSS 8.7 (high), 2026-05-19: CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability in the…
CVE-2026-34234 - CVSS 10 (critical), 2026-05-19: CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, the web-based installer (public/installer/index.php) is…
CVE-2026-34233 - CVSS 6.5 (medium), 2026-05-19: CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, multiple admin controllers expose DataTable endpoints without…
CVE-2026-34216 - CVSS 6.6 (medium), 2026-05-19: CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, the admin settings update endpoint accepted a fully qualified…
CVE-2025-25203 - CVSS 8.1 (high), 2025-02-11: CtrlPanel is open-source billing software for hosting providers. Prior to version 1.0, a Cross-Site Scripting (XSS) vulnerability exists in the…