CVE-2026-29810

MediumCVSS 4.3/10Last modified Sep 16, 2026

Description

CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-390

Affected software

No affected versions have been published.

Timeline

Published
Sep 13, 2026
Last modified
Sep 16, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-298117.7CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a primary domain; normalCVE-2026-298124.3CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list.CVE-2026-29825.4The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter iCVE-2026-298286.1DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/<id> page via the input field projectDesc.CVE-2026-29839.8A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the fiCVE-2026-298398.8DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php.CVE-2026-29846.5A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/cCVE-2026-298405.4JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserControllCVE-2026-29856.3A security flaw has been discovered in Tiandy Video Surveillance System 视频监控平台 7.17.0. This impacts the function downloadImage of the file /CVE-2026-298567.5An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression DenialCVE-2026-298587.5A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion (LFI), leadingot sensitive information exposCVE-2026-298599.8An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file.
CVE-2026-29810: Medium severity, CVSS 4.3 | Vulnix