Back to CVE Browser

CVE-2024-51378

🔥 Known Exploited (CISA KEV)CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-10-29

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.

Affected Platforms (CPE)

📦

Cyberpanel

Cyberpanel

< 2.3.8

References & Advisories

🔗 https://cwe.mitre.org/data/definitions/420.html

🔗 https://cwe.mitre.org/data/definitions/78.html

🔗 https://cyberpanel.net/KnowledgeBase/home/change-logs/

🔗 https://cyberpanel.net/blog/detials-and-fix-of-recent-security-issue-and-patch-of-cyberpanel

🔗 https://github.com/usmannasir/cyberpanel/commit/1c0c6cbcf71abe573da0b5fddfb9603e7477f683

🔗 https://refr4g.github.io/posts/cyberpanel-command-injection-vulnerability/

🔗 https://www.bleepingcomputer.com/news/security/massive-psaux-ransomware-attack-targets-22-000-cyberpanel-instances/

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-51378

Related Vulnerabilities

CVE-2021-479498.7

CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute ...

CVE-2026-414739.1

CyberPanel versions prior to 2.4.4 contain an authentication bypass vulnerability in the AI Scanner worker API endpoints that allo...

CVE-2026-414726.1

CyberPanel versions prior to 2.4.4 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST ...

CVE-2024-561126.1

CyberPanel (aka Cyber Panel) before f0cf648 allows XSS via token or username to plogical/phpmyadminsignin.php.