Advisories · Technology

1Panel-dev KubePi.

Every CVE that names 1Panel-dev KubePi among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-65956 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF
- 1Panel-dev KubePi
- Authentication bypass
Not analysed yet 26 Aug 2026
CVE-2026-69129 CVE record

CVSS 5.8 Medium

KubePi: Insufficient per-cluster authorization checks in cluster management APIs
- 1Panel-dev KubePi
- Broken access control
Not analysed yet 26 Aug 2026
CVE-2024-36111 CVE record

CVSS 6.3 Medium

KubePi's JWT token validation has a defect
- 1Panel-dev KubePi
- CWE-1259
Not analysed yet 25 Jul 2024