🚨 CVE-2026-84715
FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController updateSubuser handler, allowing authenticated subusers to modify their own permission records. A subuser with minimal permissions can send a crafted request to grant themselves full server control, enabling unauthorized access to sensitive data, backups, and server configuration.
🎖@cveNotify
GitHub
GitHub - MythicalLTD/FeatherPanel: Reimagining the Hosting Industry
Reimagining the Hosting Industry. Contribute to MythicalLTD/FeatherPanel development by creating an account on GitHub.
September 2, 2026 48
