https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:39:27.920117+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-366958 EUVD-2026-366958 2026-10-03T15:39:27.973588+00:00 EUVD-2026-366958 https://cve.radiocsirt.org/vuln/fkie_cve-2026-88895 fkie_cve-2026-88895 2026-10-03T15:39:27.973624+00:00

CyberPanel before 3.0.5 fails to enforce two-factor authentication on API endpoints, allowing attackers to bypass TOTP requirements using password-derived tokens. Attackers who obtain an administrator's password can derive API tokens and perform administrative operations or create authenticated sessions without the second factor.

 https://cve.radiocsirt.org/vuln/ghsa-mmcx-mj26-p5c9 GHSA-mmcx-mj26-p5c9 2026-10-03T15:39:27.973658+00:00

CyberPanel before 3.0.5 fails to enforce two-factor authentication on API endpoints, allowing attackers to bypass TOTP requirements using password-derived tokens. Attackers who obtain an administrator's password can derive API tokens and perform administrative operations or create authenticated sessions without the second factor.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3036 WID-SEC-W-2026-3036 — CyberPanel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T15:39:27.973677+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in CyberPanel ausnutzen, um Sicherheitsvorkehrungen zu umgehen.