CVE-2026-29811
CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a primary domain; normally spelled "alias") via an ORM query filter rather than a Python "if" statement.
- Published Sep 13, 2026
- CVSS 7.7 high
- 0.3% chance of exploitation in the next 30 days (EPSS)
- A fix is available