DirectAdmin vulnerabilities
We track 2 vulnerabilities in DirectAdmin products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2025.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest DirectAdmin vulnerabilities
- 8.2 High severity
Directadmin: Use of HTTP Request With Sensitive Query String
An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with arbitrary attacker-controlled content via supplying a crafted GET request.
- 8.6 High severity
DirectAdmin Evolution Skin: Improper Neutralization of Input During Web Page Generation
Ticket management system in DirectAdmin Evolution Skin is vulnerable to XSS (Cross-site Scripting), which allows a low-privileged user to inject and store malicious JavaScript code. If an admin views the ticket, the script might perform actions with their priv