mgt-commerce cloudpanel

Name: mgt-commerce cloudpanel
Brand: mgt-commerce

productUS

cpe:2.3:a:mgt-commerce:cloudpanel:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical5high0medium0low

updated 2026-10-28

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-35885US	critical9.8	73.5% (99th)	Exploit	2.3.1	2023-06-20	2.0.0 → 2.3.1
CVE-2023-33747US	high7.8	0.47% (40th)	Exploit	no fix	2023-06-06	2.0.0 → 2.2.2
CVE-2024-24320US	high8.8	4.02% (91st)	—	no fix	2024-06-14	2.0.0 → 2.4.0
CVE-2023-46157US	high8.8	2.32% (83rd)	—	no fix	2023-12-08	2.0.0 → 2.3.2
CVE-2023-36630US	high8.8	0.87% (59th)	—	2.3.1	2023-06-25	2.0.0 → 2.3.1
CVE-2023-0391US	high8.1OT elevated	0.60% (49th)	—	2.2.1	2023-03-21	< 2.2.1

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-321Use of Hard-coded Cryptographic Key1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-565Reliance on Cookies without Validation and Integrity Checking1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-798Use of Hard-coded Credentials1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.