CyberSecBulletin

LXware vulnerabilities

We track 2 vulnerabilities in LXware products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 10, 2025.

2vulnerabilities
0critical
2high
0exploited
7.1average CVSS score

Latest LXware vulnerabilities

  • 7.1 High severity

    1Panel: Cross-Site Request Forgery

    CVE-2025-34429LXware

    1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality. The port-change endpoint lacks CSRF defenses such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a

  • 7.1 High severity

    1Panel: Cross-Site Request Forgery

    CVE-2025-34410LXware

    1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings panel (/settings/panel). The endpoint does not implement CSRF protections such as anti-CSRF tokens or Or