Cpe:2.3:a:cyberpanel:cyberpanel:*:*:*:*:*:*:*:*

CyberPanel versions prior to 3.0.5 contain an authentication bypass vulnerability where two-factor authentication is not enforced on API endpoints, allowing credential-derived token misuse.