panel vulnerabilities

1 known vulnerability in panel from Pelican. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  panel: Missing Authorization

  CVE-2026-92762Sep 16, 2026Pelican

  Pelican Panel versions before 1.0.0-beta35 enforce startup write permissions only through disabled form controls rather than server-side authorization checks. Attackers with startup.read permission can craft Livewire state updates to invoke afterStateUpdated c