CyberSecBulletin

MythicalLTD vulnerabilities

We track 2 vulnerabilities in MythicalLTD products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.

2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score

Latest MythicalLTD vulnerabilities

  • 7.1 High severity

    MythicalDash: Insufficient Verification of Data Authenticity

    CVE-2026-54608MythicalLTD

    MythicalDash is a Pterodactyl client area. In 3.5.4-aurora and earlier, GET /api/stripe/process in backend/app/Api/System/Gateways/Stripe.php creates a pending row in mythicaldash_stripe_payments before Stripe checkout succeeds and embeds the payment code in t

  • 8.8 High severity

    FeatherPanel: Missing Authorization

    CVE-2026-84715MythicalLTD

    FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController updateSubuser handler, allowing authenticated subusers to modify their own permission records. A subuser with minimal permissions can send a crafted request to grant th