Vulnerability in CyberPanel Affects Domain Detection
CVE-2026-29811

7.7HIGH

Key Information:

Vendor

Cyberpanel

Vendor
CVE Published:
13 September 2026

What is CVE-2026-29811?

CyberPanel versions before 2.4.4 experience a vulnerability due to the improper handling of alias domains. The application relies on an ORM query filter instead of a conventional Python 'if' statement, leading to potential misidentification of secondary domains that serve the same content as the primary domain. This flaw can compromise the integrity of domain management and could allow for unintended exposure or other security concerns for web applications running on the platform.

Affected Version(s)

CyberPanel 0 < 2.4.4

References

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.