1Panel-dev · weakness class

SQL Injection

4 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Connect AI

check available: 1

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1Panel SQL Injection - AuthenticatedCVE-2024-399071Panel-dev · CVSS 9.8 · 29% likely
CWE-89
1Panel SQL injectionCVE-2024-399111Panel-dev · CVSS 10 · 4.5% likely
CWE-89
CordysCRM: Authenticated SQL injection via `sort.name` on `POST /account-pool/page`CVE-2026-768991Panel-dev · CVSS 5.7 · 0.4% likely
CWE-89
CordysCRM: Customer Public Pool Sorting Field SQL InjectionCVE-2026-527451Panel-dev · CVSS 5.3 · 0.3% likely
CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.