Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-71965 2 Cyberpanel, Usmannasir 2 Cyberpanel, Cyberpanel 2026-10-24 8.8 High
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote backup feature that allows authenticated attackers to gain root-level SSH access by supplying a malicious remote server address. Attackers can exploit the unverified SSH public key retrieval process to write an attacker-controlled public key directly to /root/.ssh/authorized_keys, granting persistent root access to the host system.