Skip to content
Threat Feed
Subscribe

Product

Pelican Panel (< 1.0.0-Beta35)

1 brief RSS
high advisory

Authorization Bypass in Pelican Panel via Livewire State Manipulation

Pelican Panel versions before 1.0.0-beta35 fail to enforce server-side write permissions, allowing attackers with read-only access to achieve arbitrary command execution via manipulated Livewire state updates.

Pelican Panel web-vulnerability authorization-bypass cve-2026-92762
2t 1c