CVE-2026-88895 in CyberPanel
Riassunto
di MITRE • 10/09/2026
CyberPanel before 3.0.5 fails to enforce two-factor authentication on API endpoints, allowing attackers to bypass TOTP requirements using password-derived tokens. Attackers who obtain an administrator's password can derive API tokens and perform administrative operations or create authenticated sessions without the second factor.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.