agentprime: panelEvery new CVE for panel.https://agentprime.io/CVE-2026-34358: CtrlPanel: Missing Authorization on Admin Write Endpoints Allows RBAC Bypasshttps://agentprime.io/advisories/CVE-2026-34358/https://agentprime.io/advisories/CVE-2026-34358/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 21:39:26 GMTCVECVE-2026-34246: CtrlPanel: Stored XSS in Admin Role Management via Unescaped DataTable HTML Outputhttps://agentprime.io/advisories/CVE-2026-34246/https://agentprime.io/advisories/CVE-2026-34246/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 21:18:10 GMTCVECVE-2026-34241: CtrlPanel: Stored XSS in Ticket Reply Notifications Allows Session Hijackinghttps://agentprime.io/advisories/CVE-2026-34241/https://agentprime.io/advisories/CVE-2026-34241/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 21:09:14 GMTCVECVE-2026-34234: CtrlPanel: Unauthenticated RCE using installer scripthttps://agentprime.io/advisories/CVE-2026-34234/https://agentprime.io/advisories/CVE-2026-34234/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 21:03:05 GMTCVEcriticalCVE-2026-34233: CtrlPanel has Missing Authentication Checks in Datatable Admin Endpointshttps://agentprime.io/advisories/CVE-2026-34233/https://agentprime.io/advisories/CVE-2026-34233/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 20:38:41 GMTCVECVE-2026-34216: CtrlPanel: Authenticated Remote Code Execution via Dynamic Class Instantiation in SettingsController.phphttps://agentprime.io/advisories/CVE-2026-34216/https://agentprime.io/advisories/CVE-2026-34216/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 20:31:16 GMTCVECVE-2026-33746: Convoy: JWT Signature Verification Bypass Allows Authentication as Arbitrary Usershttps://agentprime.io/advisories/CVE-2026-33746/https://agentprime.io/advisories/CVE-2026-33746/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 15:06:05 GMTCVEcriticalCVE-2025-52562: Convey Panel Directory Traversal in LocaleController leading to Remote Code Executionhttps://agentprime.io/advisories/CVE-2025-52562/https://agentprime.io/advisories/CVE-2025-52562/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Jun 2025 20:48:17 GMTCVEcriticalCVE-2025-25203: Ctrlpanel has stored XSS vulnerability in TicketsController priority fieldhttps://agentprime.io/advisories/CVE-2025-25203/https://agentprime.io/advisories/CVE-2025-25203/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 22:47:43 GMTCVE