CyberPanel 2.4.3-2.4.5 - AI Scanner Debug Disclosure
CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity to inventory multi-tenant installations and facilitate follow-on attacks. References: https://github.com/usmannasir/cyberpanel/security/advisories/GHSA-qmwq-9cc8-x6h2 https://github.com/usmannasir/cyberpanel/commit/20484fd https://nvd.nist.gov/vuln/detail/CVE-2026-87820 Remediation: Upgrade CyberPanel to 2.4.6
Used 20 times · 10 assets checked · domain, subdomain, ipv4