VYPR

FeatherPanel

by MythicalLTD

CVEs (1)

  • CVE-2026-84715HigSep 2, 2026
    risk 0.50cvss 8.8epss

    FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController updateSubuser handler, allowing authenticated subusers to modify their own permission records. A subuser with minimal permissions can send a crafted request to grant themselves full…