Child Domain Manipulation Vulnerability in CyberPanel by Usman Nasir
CVE-2026-29812

4.3MEDIUM

Key Information:

Vendor

Cyberpanel

Status
Cyberpanel
Vendor
CVE Published:
13 September 2026

What is CVE-2026-29812?

CyberPanel, prior to version 2.4.4, has a significant lack of logging mechanisms for actions that could alter the list of child domains. This oversight means that any modifications made to the child domains may go undetected, leading to potential security risks and manipulation of domain settings without traceability. It's crucial for users to upgrade to version 2.4.4 or later to mitigate these security concerns and enhance their overall system security.

Affected Version(s)

CyberPanel 0 < 2.4.4

References

https://github.com/usmannasir/cyberpanel/commit/0a099b1b1...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.