CVE-2026-65916Patch

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCreation handler that allows authenticated users to kill, delete, and corrupt other tenants' backups. Attackers can send crafted POST requests with arbitrary backupCancellationDomain and fileName parameters to terminate backup processes, delete backup archives, corrupt backup status files, and remove database records belonging to other tenants.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-07-23); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Patch

150.0%

Disclosure

150.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-65916

Classification over time

Date	Total	Labels

2026-07-23	1	Patch1
2026-07-24	1	Disclosure1

Full discourse2 posts

ADK Cyber@ADKCyber91d
Disclosure
CyberPanel <=1.9.1 has a missing authorization issue (CVE-2026-65916, CVSS 8.1) allowing authenticated users to delete or corrupt other users' backups. Update if in use. via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability https://t.co/1fJKlKJzgk
Post summary
The post reports a missing authorization flaw in CyberPanel (CVE‑2026‑65916) that lets authenticated users delete or corrupt backups, gives the CVSS score, and advises updating if the software is in use.
0000044
89 followersView on X
CVE@CVEnew92d
Patch
CVE-2026-65916 CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCreation handler that allows authenticated users … https://www.cve.org/CVERecord?id=CVE-2026-65916
Post summary
The CVE is a missing authorization flaw in CyberPanel’s cancelBackupCreation handler, fixed in commit b198460; no PoC or exploitation details are included.
000001.6K
57.9K followersView on X

Explore more

Back to dashboard