{"items":[{"id":"CVE-2026-108705","published":"2026-10-11T01:12:30.424Z","updated":"2026-10-14T15:59:41.081Z","title":"CordysCRM through 1.9.3 Missing Authorization via /custom-form/data/import","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2026-108704","published":"2026-10-11T01:12:29.717Z","updated":"2026-10-13T12:52:55.228Z","title":"CordysCRM through 1.9.3 Authorization Bypass via Follow-Up Record Add Endpoints","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2026-108703","published":"2026-10-11T01:12:29.098Z","updated":"2026-10-14T02:41:06.347Z","title":"CordysCRM through 1.9.3 Missing Authorization via /approval-resource/push","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2026-108702","published":"2026-10-11T01:12:28.429Z","updated":"2026-10-18T11:53:07.584Z","title":"CordysCRM through 1.9.3 Missing Authorization and Blind SSRF via Webhook Test","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2026-108701","published":"2026-10-11T01:12:27.816Z","updated":"2026-10-13T19:56:27.288Z","title":"1Panel-dev CordysCRM before 1.9.2 Missing Authorization via POST /contract/sort","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2026-108700","published":"2026-10-11T01:12:27.065Z","updated":"2026-10-14T15:59:51.114Z","title":"1Panel-dev CordysCRM before 1.9.2 Missing Authorization via /field/source/business-title","severity":"HIGH","score":7.1,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2026-108692","published":"2026-10-11T01:12:26.242Z","updated":"2026-10-14T15:59:59.416Z","title":"1Panel-dev CordysCRM 1.9.0 before 1.9.2 Missing Authorization via /field/source Endpoints","severity":"HIGH","score":7.1,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2026-79919","published":"2026-09-21T20:48:02.944Z","updated":"2026-09-22T15:39:00.922Z","title":"MaxKB function-library sandbox escape: dlopen stack-check bypass via importlib meta-path callbacks and unhooked dlsym(RTLD_NEXT)","severity":"MEDIUM","score":6.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2026-79918","published":"2026-09-21T20:47:13.575Z","updated":"2026-09-24T22:46:09.086Z","title":"MaxKB: Sandbox escape via unhooked fexecve","severity":"MEDIUM","score":6.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2026-77517","published":"2026-09-21T20:46:19.540Z","updated":"2026-09-22T13:17:22.344Z","title":"MaxKB cross-knowledge IDOR lets a normal user read and modify documents and paragraphs in another knowledge base","severity":"MEDIUM","score":5.4,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2026-77521","published":"2026-09-21T20:45:14.750Z","updated":"2026-09-22T13:32:19.198Z","title":"MaxKB: Prompt-injectable agent can lead to command execution","severity":"CRITICAL","score":10,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.01049,"kevAdded":null},{"id":"CVE-2026-77522","published":"2026-09-21T20:44:17.597Z","updated":"2026-09-24T22:45:01.746Z","title":"MaxKB: Authenticated full-read SSRF via the knowledge web-document import/sync crawler (Fork.fork requests.get, no internal-IP guard, non-blind)","severity":"MEDIUM","score":4.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.003,"kevAdded":null},{"id":"CVE-2026-79917","published":"2026-09-21T20:43:27.292Z","updated":"2026-09-22T15:39:11.594Z","title":"MaxKB: Chat share-link endpoint missing owner check: a chat token can publish another user's conversation","severity":"MEDIUM","score":6.5,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2026-77516","published":"2026-09-21T20:40:44.213Z","updated":"2026-09-28T20:13:03.315Z","title":"MaxKB: Missing per-tool authorization in the agent and workflow tool-dispatch path","severity":"MEDIUM","score":5.4,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00242,"kevAdded":null},{"id":"CVE-2026-77523","published":"2026-09-21T20:39:36.806Z","updated":"2026-09-22T13:33:00.363Z","title":"MaxKB: Cross-workspace model parameter form write","severity":"HIGH","score":7.4,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.0026,"kevAdded":null},{"id":"CVE-2026-77525","published":"2026-09-21T20:37:49.415Z","updated":"2026-09-24T22:43:08.986Z","title":"MaxKB: Management chat-record routes trust path application_id but load ChatRecord by global chat_id","severity":"MEDIUM","score":4.2,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2026-77518","published":"2026-09-21T20:36:26.835Z","updated":"2026-09-22T13:19:07.350Z","title":"MaxKB: Known MCP tool IDs expose owner Tool.code and can be referenced by attacker workflows","severity":"MEDIUM","score":5,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2026-79916","published":"2026-09-21T20:34:47.530Z","updated":"2026-09-22T15:39:19.409Z","title":"MaxKB AWS Bedrock model credential injection leads to remote code execution","severity":"CRITICAL","score":9.1,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00446,"kevAdded":null},{"id":"CVE-2026-77520","published":"2026-09-21T20:28:08.442Z","updated":"2026-09-22T15:39:25.576Z","title":"MaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's application","severity":"MEDIUM","score":5.4,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2026-77519","published":"2026-09-21T20:26:27.820Z","updated":"2026-09-24T22:42:13.590Z","title":"MaxKB: Expired application API keys remain usable on `/chat/api/mcp`","severity":"MEDIUM","score":5.4,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.0024,"kevAdded":null},{"id":"CVE-2026-76899","published":"2026-09-18T19:58:47.516Z","updated":"2026-09-24T21:05:27.034Z","title":"CordysCRM: Authenticated SQL injection via `sort.name` on `POST /account-pool/page`","severity":"MEDIUM","score":5.7,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00395,"kevAdded":null},{"id":"CVE-2026-76902","published":"2026-09-18T19:57:50.286Z","updated":"2026-09-21T16:32:17.392Z","title":"CordysCRM: Unauthenticated arbitrary file disclosure via `/attachment/preview/{id}` and `/pic/preview/{id}`","severity":"MEDIUM","score":5,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00272,"kevAdded":null},{"id":"CVE-2026-76900","published":"2026-09-18T19:56:53.620Z","updated":"2026-09-22T15:42:38.566Z","title":"CordysCRM: SSRF via Approval Flow Webhook Execution due to Missing SSRF Validation at Runtime","severity":"MEDIUM","score":6.8,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.005,"kevAdded":null},{"id":"CVE-2026-76901","published":"2026-09-18T19:55:16.527Z","updated":"2026-09-21T20:48:10.915Z","title":"CordysCRM: Broken object-level authorization in lead pool and account pool detail endpoints exposes arbitrary leads and accounts","severity":"MEDIUM","score":5.8,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2026-63647","published":"2026-09-18T19:53:51.932Z","updated":"2026-09-18T20:19:30.108Z","title":"CordysCRM SSE Notification Stream Hijack via `/sse/subscribe`","severity":"CRITICAL","score":9.3,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00496,"kevAdded":null},{"id":"CVE-2026-63646","published":"2026-09-18T19:52:06.760Z","updated":"2026-09-21T16:38:13.208Z","title":"CordysCRM MCP Form Configuration Endpoint Exposed to Anonymous Users","severity":"MEDIUM","score":6.9,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00658,"kevAdded":null},{"id":"CVE-2026-52745","published":"2026-09-18T19:51:17.097Z","updated":"2026-09-19T14:01:29.368Z","title":"CordysCRM: Customer Public Pool Sorting Field SQL Injection","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2026-65956","published":"2026-08-26T22:40:55.741Z","updated":"2026-08-29T02:55:41.323Z","title":"KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF","severity":"CRITICAL","score":10,"vendor":"1Panel-dev","product":"KubePi","kev":false,"epss":0.00643,"kevAdded":null},{"id":"CVE-2026-69129","published":"2026-08-26T22:04:03.301Z","updated":"2026-08-27T14:32:23.251Z","title":"KubePi: Insufficient per-cluster authorization checks in cluster management APIs","severity":"MEDIUM","score":5.8,"vendor":"1Panel-dev","product":"KubePi","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2026-64870","published":"2026-07-30T17:01:18.102Z","updated":"2026-07-30T17:42:51.968Z","title":"MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00364,"kevAdded":null},{"id":"CVE-2026-16223","published":"2026-07-19T07:15:09.159Z","updated":"2026-07-21T14:48:42.529Z","title":"1Panel-dev CordysCRM Third Party Edit Endpoint IntegrationConfigService.java getSqlBotSrc server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2026-16222","published":"2026-07-19T06:45:09.639Z","updated":"2026-07-20T10:26:14.132Z","title":"1Panel-dev CordysCRM Third Party Endpoint TokenService.java server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2026-54149","published":"2026-07-10T15:05:32.613Z","updated":"2026-07-10T16:01:08.445Z","title":"MaxKB MCP tool import validation bypass allows post-authentication remote code execution","severity":"HIGH","score":8.8,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00486,"kevAdded":null},{"id":"CVE-2026-56779","published":"2026-06-25T18:11:12.206Z","updated":"2026-07-28T01:49:46.058Z","title":"MaxKB < 2.10.0 - Server-Side Request Forgery via downloadCallbackUrl and download_url Parameters","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2026-10567","published":"2026-06-02T02:00:15.087Z","updated":"2026-06-02T13:11:19.461Z","title":"1Panel-dev CordysCRM ModuleFormController ModuleFormService.java save cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2026-10514","published":"2026-06-01T23:45:12.138Z","updated":"2026-06-02T15:45:28.904Z","title":"1Panel-dev CordysCRM RequestParamTrimConfig.java cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"1Panel-dev","product":"CordysCRM","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-42336","published":"2026-05-26T20:22:41.423Z","updated":"2026-05-27T17:27:41.448Z","title":"MaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL Fetch","severity":"MEDIUM","score":5.1,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00203,"kevAdded":null},{"id":"CVE-2026-42337","published":"2026-05-26T20:19:40.844Z","updated":"2026-05-27T13:23:02.787Z","title":"MaxKB: Broken Access Control in MaxKB OSS URL Fetch API","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2026-44847","published":"2026-05-26T20:16:46.794Z","updated":"2026-06-01T17:09:26.401Z","title":"MaxKB: Webhook Trigger Authentication Bypass","severity":"HIGH","score":7.5,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2026-45412","published":"2026-05-26T20:14:39.702Z","updated":"2026-05-27T17:27:12.540Z","title":"MaxKB: Unauthenticated SSRF via Workflow Template Import","severity":"MEDIUM","score":6.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2026-45413","published":"2026-05-26T20:12:34.805Z","updated":"2026-05-27T13:22:28.597Z","title":"MaxKB: Unsalted MD5 Password Hashing","severity":"MEDIUM","score":6.9,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2026-42335","published":"2026-05-26T20:09:25.244Z","updated":"2026-05-27T19:26:39.919Z","title":"MaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing Discrepancy","severity":"MEDIUM","score":6.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2026-39426","published":"2026-04-14T01:25:10.592Z","updated":"2026-04-16T13:26:39.917Z","title":"MaxKB: Stored XSS via Unsanitized iframe_render Parsing","severity":"MEDIUM","score":5.1,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00193,"kevAdded":null},{"id":"CVE-2026-39425","published":"2026-04-14T01:18:42.895Z","updated":"2026-04-14T15:56:06.211Z","title":"MaxKB: Stored XSS via Unsanitized html_rander Tags in Markdown Rendering","severity":"MEDIUM","score":5.1,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2026-39419","published":"2026-04-14T01:03:40.653Z","updated":"2026-04-14T13:28:04.792Z","title":"MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing","severity":"LOW","score":3.1,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2026-39424","published":"2026-04-14T00:56:56.625Z","updated":"2026-04-16T13:26:40.061Z","title":"MaxKB has CSV Injection in its Application Chat Export Functionality","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2026-39423","published":"2026-04-14T00:28:47.572Z","updated":"2026-04-14T15:55:17.386Z","title":"Stored XSS via Eval Injection in EchartsRander Component","severity":"MEDIUM","score":6.9,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2026-39422","published":"2026-04-14T00:22:50.958Z","updated":"2026-04-14T13:32:41.804Z","title":"MaxKB has Stored XSS via ChatHeadersMiddleware","severity":"MEDIUM","score":6.9,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00216,"kevAdded":null},{"id":"CVE-2026-39421","published":"2026-04-14T00:17:10.279Z","updated":"2026-04-14T16:28:08.560Z","title":"MaxKB: Sandbox escape via ctypes and unhooked SYS_pkey_mprotect","severity":"MEDIUM","score":6.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00264,"kevAdded":null},{"id":"CVE-2026-39420","published":"2026-04-14T00:13:01.189Z","updated":"2026-04-16T13:26:40.212Z","title":"MaxKB: Sandbox escape via LD_PRELOAD bypass","severity":"MEDIUM","score":6.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00485,"kevAdded":null},{"id":"CVE-2026-39418","published":"2026-04-14T00:08:50.182Z","updated":"2026-04-14T15:54:30.206Z","title":"MaxKB: SSRF via sandbox network hook bypass","severity":"MEDIUM","score":5,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2026-39417","published":"2026-04-14T00:03:16.020Z","updated":"2026-04-14T13:34:07.454Z","title":"MaxKB: RCE via MCP stdio command injection in workflow engine","severity":"MEDIUM","score":4.6,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2025-15632","published":"2026-04-13T09:30:21.266Z","updated":"2026-04-13T13:01:08.819Z","title":"1Panel-dev MaxKB MdPreview chat.ts cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00266,"kevAdded":null},{"id":"CVE-2026-6108","published":"2026-04-12T01:00:19.735Z","updated":"2026-04-14T14:00:16.365Z","title":"1Panel-dev MaxKB Model Context Protocol Node base_mcp_node.py execute os command injection","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.01451,"kevAdded":null},{"id":"CVE-2026-6107","published":"2026-04-12T00:45:18.908Z","updated":"2026-04-15T15:16:00.722Z","title":"1Panel-dev MaxKB ChatHeadersMiddleware chat_headers_middleware.py cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2026-6106","published":"2026-04-11T22:15:14.027Z","updated":"2026-04-13T12:26:30.360Z","title":"1Panel-dev MaxKB Public Chat static_headers_middleware.py StaticHeadersMiddleware cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00266,"kevAdded":null},{"id":"CVE-2026-23525","published":"2026-01-18T22:10:59.500Z","updated":"2026-01-20T20:07:16.229Z","title":"1panel App Store vulnerable to Cross-site Scripting","severity":"MEDIUM","score":6.4,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.00373,"kevAdded":null},{"id":"CVE-2025-66446","published":"2025-12-11T21:47:22.479Z","updated":"2025-12-18T20:41:51.061Z","title":"MaxKB has a Python sandbox LD_PRELOAD bypass","severity":"HIGH","score":8.8,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2025-66419","published":"2025-12-11T21:39:15.361Z","updated":"2025-12-18T20:35:44.242Z","title":"MaxKB vulnerable to privilege escalation through sandbox bypass","severity":"HIGH","score":8.8,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.0031,"kevAdded":null},{"id":"CVE-2025-66508","published":"2025-12-09T01:37:10.219Z","updated":"2025-12-09T16:03:08.608Z","title":"1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers","severity":"MEDIUM","score":6.5,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2025-66507","published":"2025-12-09T01:25:48.140Z","updated":"2025-12-09T16:03:18.696Z","title":"1Panel – CAPTCHA Bypass via Client-Controlled Flag","severity":"HIGH","score":7.5,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.00463,"kevAdded":null},{"id":"CVE-2025-64703","published":"2025-11-13T15:52:44.465Z","updated":"2025-11-13T16:16:09.452Z","title":"MaxKB has Information Leak in sandbox","severity":"MEDIUM","score":6.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2025-64511","published":"2025-11-13T15:51:53.788Z","updated":"2025-11-13T16:17:00.321Z","title":"MaxKB has SSRF in sandbox","severity":"HIGH","score":7.4,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2025-10433","published":"2025-09-15T08:02:06.678Z","updated":"2025-09-15T15:09:48.130Z","title":"1Panel-dev MaxKB debug deserialization","severity":"MEDIUM","score":5.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2025-54424","published":"2025-08-01T23:04:38.142Z","updated":"2025-08-04T14:18:25.328Z","title":"1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution","severity":"HIGH","score":8.1,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.0109,"kevAdded":null},{"id":"CVE-2025-53928","published":"2025-07-17T13:56:02.915Z","updated":"2025-07-17T19:57:19.063Z","title":"MaxKB has RCE in MCP call","severity":"MEDIUM","score":4.6,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2025-53927","published":"2025-07-17T13:50:18.268Z","updated":"2025-07-17T19:56:23.111Z","title":"MaxKB sandbox bypass","severity":"MEDIUM","score":4.6,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2025-48950","published":"2025-06-03T18:16:09.060Z","updated":"2025-06-03T18:36:25.824Z","title":"MaxKB Python Sandbox Bypass in Function Library","severity":"MEDIUM","score":5.8,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.0048,"kevAdded":null},{"id":"CVE-2025-4546","published":"2025-05-11T20:00:06.708Z","updated":"2025-05-12T18:56:54.462Z","title":"1Panel-dev MaxKB Knowledge Base Module csv injection","severity":"MEDIUM","score":5.1,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00711,"kevAdded":null},{"id":"CVE-2025-32383","published":"2025-04-10T13:07:12.404Z","updated":"2025-04-10T13:35:56.129Z","title":"MaxKB has a reverse shell vulnerability in function library","severity":"MEDIUM","score":4.3,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00292,"kevAdded":null},{"id":"CVE-2024-56137","published":"2025-01-02T14:26:19.958Z","updated":"2025-01-02T17:56:52.607Z","title":"MaxKB RCE vulnerability in function library","severity":"MEDIUM","score":6.8,"vendor":"1Panel-dev","product":"MaxKB","kev":false,"epss":0.00808,"kevAdded":null},{"id":"CVE-2024-36111","published":"2024-07-25T13:26:13.257Z","updated":"2024-08-02T03:30:12.864Z","title":"KubePi's JWT token validation has a defect","severity":"MEDIUM","score":6.3,"vendor":"1Panel-dev","product":"KubePi","kev":false,"epss":0.08388,"kevAdded":null},{"id":"CVE-2024-39911","published":"2024-07-18T15:35:15.584Z","updated":"2025-02-13T17:53:20.929Z","title":"1Panel SQL injection","severity":"CRITICAL","score":10,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.04528,"kevAdded":null},{"id":"CVE-2024-39907","published":"2024-07-18T15:31:30.892Z","updated":"2024-08-02T04:33:11.402Z","title":"a sqlinjection in 1Panel","severity":"CRITICAL","score":9.8,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.29183,"kevAdded":null},{"id":"CVE-2024-34352","published":"2024-05-09T14:38:19.241Z","updated":"2024-08-02T02:51:10.692Z","title":"Arbitrary file write vulnerability in 1Panel","severity":"MEDIUM","score":6.5,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.01329,"kevAdded":null},{"id":"CVE-2024-30257","published":"2024-04-18T14:56:56.270Z","updated":"2024-08-02T01:32:05.409Z","title":"1Panel's password verification is suspected to have a timing attack vulnerability","severity":"LOW","score":3.9,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.0038,"kevAdded":null},{"id":"CVE-2024-27288","published":"2024-03-06T18:23:50.053Z","updated":"2024-08-27T16:52:53.993Z","title":"1Panel open source panel project has an unauthorized vulnerability.","severity":"MEDIUM","score":6.3,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2024-24768","published":"2024-02-05T15:07:41.738Z","updated":"2025-06-17T21:29:25.811Z","title":"1Panel set-cookie is missing the Secure keyword","severity":"MEDIUM","score":6.5,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.00304,"kevAdded":null},{"id":"CVE-2023-39966","published":"2023-08-10T17:46:21.104Z","updated":"2024-10-04T18:56:18.054Z","title":"1Panel arbitrary file write vulnerability exists in the background","severity":"HIGH","score":7.5,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.00834,"kevAdded":null},{"id":"CVE-2023-39965","published":"2023-08-10T17:42:05.793Z","updated":"2024-10-04T18:57:04.477Z","title":"1Panel Unauthorized access in Backend","severity":"MEDIUM","score":6.5,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2023-39964","published":"2023-08-10T17:39:11.768Z","updated":"2024-10-04T18:57:45.505Z","title":"1Panel O&M management panel has a background arbitrary file reading vulnerability","severity":"HIGH","score":7.5,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.00972,"kevAdded":null},{"id":"CVE-2023-37916","published":"2023-07-21T20:15:12.050Z","updated":"2024-10-10T18:36:15.480Z","title":"Leak password hash of any user","severity":"MEDIUM","score":6.5,"vendor":"1Panel-dev","product":"KubePi","kev":false,"epss":0.00814,"kevAdded":null},{"id":"CVE-2023-37917","published":"2023-07-21T20:13:22.401Z","updated":"2024-10-10T18:37:38.475Z","title":"Privilege Escalation in kubepi","severity":"CRITICAL","score":9.1,"vendor":"1Panel-dev","product":"KubePi","kev":false,"epss":0.00743,"kevAdded":null},{"id":"CVE-2023-37477","published":"2023-07-18T18:25:53.691Z","updated":"2024-10-18T17:22:22.643Z","title":"Command injection in firewall ip functionality in 1Panel","severity":"HIGH","score":7.2,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.05845,"kevAdded":null},{"id":"CVE-2023-36457","published":"2023-07-05T20:57:23.640Z","updated":"2024-10-18T19:33:33.395Z","title":"1Panel vulnerable to command injection when adding container repositories","severity":"MEDIUM","score":6.3,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.02313,"kevAdded":null},{"id":"CVE-2023-36458","published":"2023-07-05T20:57:19.130Z","updated":"2024-10-18T19:36:17.850Z","title":"1Panel vulnerable to ommand injection when entering the container terminal","severity":"MEDIUM","score":6.3,"vendor":"1Panel-dev","product":"1Panel","kev":false,"epss":0.02313,"kevAdded":null}]}