Business Logic Vulnerability in CyberPanel by Usman Nasir
CVE-2026-29810

4.3MEDIUM

Key Information:

Vendor

Cyberpanel

Status
Cyberpanel
Vendor
CVE Published:
13 September 2026

What is CVE-2026-29810?

CyberPanel versions prior to 2.4.4 contain a vulnerability where a 'return 0' statement, essential for correct business logic execution, is omitted. This flaw may lead to disruptions in expected functionalities and could be exploited by attackers to manipulate processes or gain unauthorized access. It is crucial for users of affected versions to upgrade to enhance their system's security and integrity.

Affected Version(s)

CyberPanel 0 < 2.4.4

References

https://github.com/usmannasir/cyberpanel/commit/0a099b1b1...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.