PT-2026-39523 · Cyberpanel · Cyberpanel

Numan Türle · Published 2026-05-10 · Updated 2026-05-10 · CVE-2021-47949

NVD

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink attacks through the filemanager controller endpoint. Attackers can manipulate the completeStartingPath parameter in POST requests to /filemanager/controller to create symbolic links, read sensitive files like database credentials, and execute arbitrary shell commands through the /websites/fetchFolderDetails endpoint.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2021-47949

Affected Products

Cyberpanel

References · 5

• 🔥 https://exploit-db.com/exploits/50230 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47949 · Security Note
• https://github.com/usmannasir/cyberpanel · Note
• https://cyberpanel.net · Note
• https://vulncheck.com/advisories/cyberpanel-authenticated-remote-code-execution-via-symlink-attack · Note