PT-2026-39523 · Unknown · Cyberpanel

Numan Türle · Published 2026-05-10 · Updated 2026-05-10 · CVE-2021-47949

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CyberPanel version 2.1

Description Authenticated attackers can read arbitrary files and execute remote code by exploiting symlink attacks. By manipulating the completeStartingPath parameter in POST requests to the "/filemanager/controller" endpoint, attackers can create symbolic links to access sensitive data, such as database credentials. Additionally, arbitrary shell commands can be executed through the "/websites/fetchFolderDetails" endpoint.

Recommendations Upgrade to version 2.1.2.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2021-47949

Affected Products

Cyberpanel

References · 7

• 🔥 https://exploit-db.com/exploits/50230 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47949 · Security Note
• https://github.com/usmannasir/cyberpanel · Note
• https://twitter.com/UpwindMDR/status/2053556359908798518 · Twitter Post
• https://vulncheck.com/advisories/cyberpanel-authenticated-remote-code-execution-via-symlink-attack · Note
• https://twitter.com/CVEnew/status/2053537416934486439 · Twitter Post
• https://cyberpanel.net · Note