GO-2025-3612

vendorUSosv

Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel

view advisory published 2025-04-22Licence: per source

Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-30206US—OT elevated—
Dpanel is a Docker visualization panel system which provides complete Docker management functions. The Dpanel service contains a hardcoded JWT secret in its default configuration,…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan