PT-2026-20593 · Unknown · Opengamepanel

Published 2026-02-19 · Updated 2026-02-23 · CVE-2025-15586

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions OpenGamePanel versions prior to git commit 52f865a4fba763594453068acf8fa9e3fc38d663

Description A type juggling flaw exists in OpenGamePanel. Exploitation of this flaw can lead to authentication bypass without requiring knowledge of the victim’s account password. The issue stems from weak PHP comparisons.

Recommendations Update to a version beyond git commit 52f865a4fba763594453068acf8fa9e3fc38d663.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-15586

Affected Products

Opengamepanel

References · 8

• https://osv.dev/vulnerability/CVE-2025-15586 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-15586 · Security Note
• https://github.com/OpenGamePanel/OGP-Website/commit/52f865a4fba763594453068acf8fa9e3fc38d663 · Note
• https://github.com/OpenGamePanel/OGP-Website/pull/644 · Note
• https://t.me/CVEtracker/45067 · Telegram Post
• https://projectblack.io/blog/vibe-hacking-open-game-panel-rce/#vul-01-type-juggling-authentication-bypass · Note
• https://twitter.com/0dayPublishing/status/2024335663181574162 · Twitter Post
• https://twitter.com/CVEnew/status/2025892084905877929 · Twitter Post