Control Panel vulnerabilities

2 known vulnerabilities in Control Panel from Hestiacp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  hestiacp: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-30007Jul 10, 2026HestiacpEPSS 3.24%

  HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticated users to execute arbitrary commands as root by injecting a single-quote character into unvalidated DNS record types. Attackers can exploi

• 8.8 High severity

  hestiacp/hestiacp: Improper Neutralization of Special Elements used in a Command

  CVE-2022-1509Apr 28, 2022HestiacpEPSS 4.53%

  Command Injection Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.12. An authenticated remote attacker with low privileges can execute arbitrary code under root context.