1P
Product
1Panel
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 3Low 1
Watch
Add 1Panel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-37477 | 8.8 | Jul 18 | Command injection in firewall ip functionality in 1Panel Affected: < 1.4.3 |
| CVE-2023-36457 | 8.8 | Jul 5 | 1Panel vulnerable to command injection when adding container repositories Affected: < 1.3.6 |
| CVE-2023-36458 | 8.8 | Jul 5 | 1Panel vulnerable to ommand injection when entering the container terminal Affected: , 1.3.6 |
| CVE-2026-23525 | 8.4 | Jan 18 | 1panel App Store vulnerable to Cross-site Scripting Affected: < 1.10.34; >= 2.0.0, < 2.0.17 |
| CVE-2025-66507 | 7.5 | Dec 9 | 1Panel – CAPTCHA Bypass via Client-Controlled Flag Affected: < 2.0.14 |
| CVE-2024-34352 | 7.5 | May 9 | Arbitrary file write vulnerability in 1Panel Affected: <= v1.10.2-lts |
| CVE-2024-24768 | 7.5 | Feb 5 | 1Panel set-cookie is missing the Secure keyword Affected: <= 1.9.5 |
| CVE-2023-39964 | 7.5 | Aug 10 | 1Panel O&M management panel has a background arbitrary file reading vulnerability Affected: = 1.4.3 |
Showing 8