10.0
Critical
CVE-2024-39911 1Panel is a web-based linux server management control panel
Description
1Panel is a web-based linux server management control panel. 1Panel contains an unspecified sql injection via User-Agent handling. This issue has been addressed in version 1.10.12-lts. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected products and versions
Other CVEs of 1Panel
The 16 CVEs of 1Panel →
CVE-2026-23525
1Panel is an open-source, web-based control panel for Linux server management
6.4
Medium
CVE-2025-66508
1Panel is an open-source, web-based control panel for Linux server management
6.5
Medium
CVE-2025-66507
1Panel is an open-source, web-based control panel for Linux server management
7.5
High
CVE-2025-54424
1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server
8.1
High