Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference (IDOR) vulnerability in the IncBackups application's incremental-backup handlers (deleteBackup, fetchRestorePoints, and restorePoint) that allows authenticated panel users to access or manipulate other tenants' backup resources by supplying an attacker-controlled globally sequential IncJob integer ID that is never re-scoped to the authorized domain. Attackers can enumerate sequential backup IDs to read another tenant's backup metadata, irrecoverably delete another tenant's backup snapshots, or trigger unauthorized restoration of another tenant's backup job with root privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
CyberPanel through 1.9.1 contains a high-severity IDOR vulnerability (CVE-2026-65917, CVSS 8.8) in incremental backup handlers. Update to the fixed version. via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/WEwzLQ06nF
Post summary
The tweet discloses an IDOR flaw in CyberPanel 1.9.1 and urges users to update to the fixed version, emphasizing the availability of a patch.
CVE-2026-65917 CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference (IDOR) vulnerability in the IncBackups application's incremental-backu… https://www.cve.org/CVERecord?id=CVE-2026-65917
Post summary
The text announces CVE-2026-65917 as an IDOR vulnerability affecting CyberPanel up to 1.9.1, fixed via a specific commit.
#CVE-2026-65917 - IDOR in Cyberpanel IncBackups allows authenticated users to access/delete other tenants' backups via sequential job IDs. #CVSS 8.8. No patch yet. Isolate or restrict access now. #CVEAlert #CyberPanel #infosec #devsecops #devops #developer #infosec https://www.valtersit.com/cve/CVE-2026-65917
Post summary
The tweet announces a new IDOR vulnerability (CVE-2026-65917) in CyberPanel’s backup feature with a CVSS of 8.8, advises isolating or restricting access as a workaround, and notes that no patch is currently available.
🚨High - CyberPanel IncBackups IDOR via Sequential Backup ID (CVE-2026-65917) CyberPanel (through 1.9.1) has an insecure direct object reference in its IncBackups incremental-backup handlers - deleteBackup, fetchRestorePoints, and restorePoint - which accept a globally sequential IncJob integer ID that is never re-scoped to the authorized domain. An authenticated panel user can enumerate sequential IDs to read another tenant's backup metadata, irrecoverably delete another tenant's backup snapshots, or trigger a root-privileged restore of another tenant's backup job. Sequential IDs make enumeration trivial, and CyberPanel is a frequent mass-exploitation target. CVSS 8.7. 👉Update CyberPanel to the release containing fix commit b198460.
Post summary
CyberPanel 1.9.1 contains a high‑severity IDOR vulnerability (CVE‑2026‑65917) allowing authenticated users to enumerate and delete backups of other tenants; updating to the release with commit b198460 resolves the issue.