Skip to content
Threat Feed
Subscribe

Tag

Web-Panel

1 brief RSS
critical advisory

CyberPanel Insecure Direct Object Reference (IDOR) Vulnerability (CVE-2026-65917)

An Insecure Direct Object Reference (IDOR) vulnerability, tracked as CVE-2026-65917, exists in CyberPanel versions through 1.9.1, specifically within the IncBackups application's incremental-backup handlers, allowing authenticated panel users to exploit attacker-controlled IncJob integer IDs to access, read metadata from, delete, or trigger unauthorized restoration of other tenants' backup resources, potentially leading to operations with root privileges.

CyberPanel vulnerability idor web-panel privilege-escalation data-manipulation
3t 1c