1panel-dev vulnerabilities
87 CVEs and advisories name 1panel-dev as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-1264961Panel-dev CordysCRM before 1.9.6 Authorization Bypass via /account/contact/get/{id}
- CVE-2026-108705CordysCRM through 1.9.3 Missing Authorization via /custom-form/data/import
- CVE-2026-108704CordysCRM through 1.9.3 Authorization Bypass via Follow-Up Record Add Endpoints
- CVE-2026-108703CordysCRM through 1.9.3 Missing Authorization via /approval-resource/push
- CVE-2026-108702CordysCRM through 1.9.3 Missing Authorization and Blind SSRF via Webhook Test
- CVE-2026-1087011Panel-dev CordysCRM before 1.9.2 Missing Authorization via POST /contract/sort
- CVE-2026-1087001Panel-dev CordysCRM before 1.9.2 Missing Authorization via /field/source/business-title
- CVE-2026-1086921Panel-dev CordysCRM 1.9.0 before 1.9.2 Missing Authorization via /field/source Endpoints
- CVE-2026-79919MaxKB function-library sandbox escape: dlopen stack-check bypass via importlib meta-path callbacks and unhooked dlsym(RTLD_NEXT)
- CVE-2026-79918MaxKB: Sandbox escape via unhooked fexecve
- CVE-2026-77517MaxKB cross-knowledge IDOR lets a normal user read and modify documents and paragraphs in another knowledge base
- CVE-2026-77521MaxKB: Prompt-injectable agent can lead to command execution
- CVE-2026-77522MaxKB: Authenticated full-read SSRF via the knowledge web-document import/sync crawler (Fork.fork requests.get, no internal-IP guard, non-blind)
- CVE-2026-79917MaxKB: Chat share-link endpoint missing owner check: a chat token can publish another user's conversation
- CVE-2026-77516MaxKB: Missing per-tool authorization in the agent and workflow tool-dispatch path
- CVE-2026-77523MaxKB: Cross-workspace model parameter form write
- CVE-2026-77525MaxKB: Management chat-record routes trust path application_id but load ChatRecord by global chat_id
- CVE-2026-77518MaxKB: Known MCP tool IDs expose owner Tool.code and can be referenced by attacker workflows
- CVE-2026-79916MaxKB AWS Bedrock model credential injection leads to remote code execution
- CVE-2026-77520MaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's application
- CVE-2026-77519MaxKB: Expired application API keys remain usable on `/chat/api/mcp`
- CVE-2026-76899CordysCRM: Authenticated SQL injection via `sort.name` on `POST /account-pool/page`
- CVE-2026-76902CordysCRM: Unauthenticated arbitrary file disclosure via `/attachment/preview/{id}` and `/pic/preview/{id}`
- CVE-2026-76900CordysCRM: SSRF via Approval Flow Webhook Execution due to Missing SSRF Validation at Runtime
- CVE-2026-76901CordysCRM: Broken object-level authorization in lead pool and account pool detail endpoints exposes arbitrary leads and accounts
- CVE-2026-63647CordysCRM SSE Notification Stream Hijack via `/sse/subscribe`
- CVE-2026-63646CordysCRM MCP Form Configuration Endpoint Exposed to Anonymous Users
- CVE-2026-52745CordysCRM: Customer Public Pool Sorting Field SQL Injection
- CVE-2026-65956KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF
- CVE-2026-69129KubePi: Insufficient per-cluster authorization checks in cluster management APIs