[0day-rubbish] CloudPanel 2.5.4-3 site-settings rootDirectory nginx virtual-host injection to host root code execution (8.8)

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-15 07:42 UTC
  • Importiert: 2026-10-15 09:17 UTC
  • Quelle-ID: full_disc
  • uid_hash: 76be7912ecb37ef2d1c5c8264aacb2c8f0813550dd4ae32af0be0492f33bb25f

Inhalt

Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability in CloudPanel

Community Edition 2.5.4-3+clp-bookworm, the closed-source server-management panel

from cloudpanel.io (Germany) that provisions and supervises nginx, php-fpm,

MariaDB and hosted web sites from a Symfony application listening on port 8443.

The build under advisory is the vendor's own distribution package, 69,183,476

bytes, md5 24c36a4739ce065c5c188c89def06f29, on...

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

threat_intel - de https://seclists.org/rss/fulldisclosure.rss