Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote backup feature that allows authenticated attackers to gain root-level SSH access by supplying a malicious remote server address. Attackers can exploit the unverified SSH public key retrieval process to write an attacker-controlled public key directly to /root/.ssh/authorized_keys, granting persistent root access to the host system.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🚨 HIGH: CVE-2026-71965 (CVSS 8.8) CyberPanel 2[.]4[.]3 auth RCE allows attackers to gain root SSH access via malicious remote backup server address. Patch immediately to commit eca0c3c. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/g5bSy0zJzG