CVE-2026-29810
Received Received - Intake

CyberPanel Logic Error Before 2.4.4

Publication date: 2026-09-13

Last updated on: 2026-09-13

Assigner: MITRE

Description
CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-13
Last Modified
2026-09-13
Generated
2026-09-14
AI Q&A
2026-09-13
EPSS Evaluated
N/A
NVD
CVE-2026-29810
EUVD
EUVD-2026-77074

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
cyberpanel cyberpanel to 2.4.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-390 The product detects a specific error, but takes no actions to handle the error.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CyberPanel before version 2.4.4 has a logic flaw where a required 'return 0' statement is missing in the code. This omission can lead to ambiguous behavior in the system's business logic, potentially causing improper access control or unexpected outcomes.

Impact Analysis

This vulnerability could allow unauthorized users to bypass intended access controls or cause the system to behave unpredictably. The CVSS score of 4.3 indicates a moderate risk, primarily affecting users with local access or those interacting with the system.

Mitigation Strategies

Update CyberPanel to version 2.4.4 or later to address the missing return 0 statement in the business logic.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-29810. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart