Vendor
critical
advisory
Sandbox Escape in OpenPanel js-runtime via Webhook Template Validator
2 TTPs 1 CVEA sandbox escape vulnerability in the OpenPanel js-runtime allows authenticated users with project write access to achieve arbitrary code execution via the webhook template validator.
js-runtime
vulnerability
sandbox-escape
arbitrary-code-execution
2t
1c
high
advisory
Unauthenticated SSRF in Openpanel Site Checker
1 rule 8 TTPs 1 CVEOpenpanel versions before 2.3.0 are vulnerable to an unauthenticated server-side request forgery (SSRF) flaw in the /tools/site-checker endpoint that allows internal network probing and cloud metadata access.
Openpanel +2
web-vulnerability
ssrf
reconnaissance
remote-code-execution
injection
privilege-escalation
web-application
cve-2026-88891
+3
1r
8t
1c
updated