Openpanel versions before 2.3.0 are vulnerable to an unauthenticated server-side request forgery (SSRF) flaw in the /tools/site-checker endpoint that allows internal network probing and cloud metadata access.
Openpanel +2
web-vulnerability
ssrf
reconnaissance
remote-code-execution
injection
privilege-escalation
web-application
cve-2026-88891
+3
1r
8t
1c
updated