Skip to content
Threat Feed
Subscribe

Vendor

Usmannasir

1 brief RSS
high advisory

CyberPanel Missing Authorization Vulnerability Allows Cross-Tenant Backup Manipulation

A missing authorization vulnerability, identified as CVE-2026-65916, in CyberPanel through version 1.9.1 allows authenticated users to manipulate and destroy other tenants' backups by sending crafted POST requests to the `cancelBackupCreation` handler.

CyberPanel web-vulnerability authorization-bypass data-destruction cve
1r 2t 1c