MEDIUMVulnerability
CVE-2026-87820
CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity to inventory multi-tenant installations and facilitate follow-on attacks.
Properties
- severity
- MEDIUM
- score
- 5.3
- cve_id
- CVE-2026-87820
- signal_observed_at
- 2026-09-17T21:32:24+00:00
- vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- published_at
- 2026-09-09T12:17:17.260
- last_modified
- 2026-09-14T14:17:17.783
Related Entities (2)
HAS_WEAKNESS (1)
→[Weakness]Exposure of Sensitive Information to an Unauthorized Actor
DESCRIBED_BY (1)
→[Source]NVD
Explore deeper with Ninja Signal's threat intelligence graph