CVE-2021-47949CWE-59

CVE-2021-47949

High · published May 10, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink attacks through the filemanager controller endpoint. Attackers can manipulate the completeStartingPath parameter in POST requests to /filemanager/controller to create symbolic links, read sensitive files like database credentials, and execute arbitrary shell commands through the /websites/fetchFolderDetails endpoint.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00533 · 44.2th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2026-05-10T17:16Z
References (4)
https://cyberpanel.net/ · [email protected]https://github.com/usmannasir/cyberpanel · [email protected]https://www.exploit-db.com/exploits/50230 · [email protected]https://www.vulncheck.com/advisories/cyberpanel-authenticated-remote-code-execution-via-symlink-attack · [email protected]
EPSS history
Timeline
  • 10 MAY 12:52Z
    CyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack
    cvelistv5