https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:42:59.999287+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-37916 CVE-2023-37916 — Leak password hash of any user 2026-10-07T19:43:00.015049+00:00

Affected: 1Panel-dev KubePi, fit2cloud kubepi

KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password hash of any user (including admin). A sufficiently motivated attacker may be able to crack leaded password hashes. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.