fit2cloud 1panel

Name: fit2cloud 1panel
Brand: fit2cloud

productUS

cpe:2.3:a:fit2cloud:1panel:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

5critical9high3medium1low

updated 2026-10-28

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-54424US	critical9.8	1.01% (63rd)	Exploit	2.0.6	2025-08-01	< 2.0.6
CVE-2024-39907US	critical9.8	29.2% (98th)	—	1.10.12-lts	2024-07-18	1.10.9-lts → 1.10.12-lts
CVE-2023-37477US	high8.8	5.85% (93rd)	—	1.4.3	2023-07-18	< 1.4.3
CVE-2024-39911US	critical9.8	4.53% (92nd)	—	1.10.12-lts	2024-07-18	1.10.10-lts → 1.10.12-lts
CVE-2024-2352US	critical9.8	3.04% (87th)	—	1.10.2-lts	2024-03-10	< 1.10.2-lts
CVE-2023-36458US	high8.8	2.31% (83rd)	—	1.3.6	2023-07-05	< 1.3.6
CVE-2023-36457US	high8.8	2.31% (83rd)	—	1.3.6	2023-07-05	< 1.3.6
CVE-2024-34352US	high7.5	1.33% (71st)	—	1.10.3-lts	2024-05-14	< 1.10.3-lts
CVE-2025-56413US	—	1.20% (68th)	—	no fix	2025-09-10	= 2.0.8
CVE-2023-39964US	high7.5	0.97% (62nd)	—	no fix	2023-08-10	= 1.4.3
CVE-2023-39966US	critical9.8OT elevated	0.83% (57th)	—	no fix	2023-08-10	= 1.4.3
CVE-2024-27288US	low3.1OT elevated	0.47% (41st)	—	1.10.1-lts	2024-03-06	< 1.10.1-lts
CVE-2025-66507US	—	0.47% (40th)	—	2.0.14	2025-12-09	< 2.0.14
CVE-2023-39965US	medium4.3OT elevated	0.44% (38th)	—	no fix	2023-08-10	= 1.4.3
CVE-2024-30257US	medium5.9	0.38% (32nd)	—	1.10.3-lts	2024-04-18	< 1.10.3-lts
CVE-2026-23525US	high8.4	0.37% (31st)	—	1.10.34	2026-01-18	2 versions
CVE-2024-24768US	high7.5OT elevated	0.30% (23rd)	—	no fix	2024-02-05	= 1.9.5
CVE-2025-66508US	—	0.25% (17th)	—	2.0.14	2025-12-09	< 2.0.14
CVE-2025-34430US	medium4.3	0.21% (11th)	—	no fix	2025-12-10	1.10.33-lts → 2.0.15
CVE-2025-34429US	high7.1	0.18% (7th)	—	no fix	2025-12-10	1.10.33-lts → 2.0.15
CVE-2025-34410US	high7.1	0.16% (5th)	—	no fix	2025-12-10	1.10.33-lts → 2.0.15

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')5 CVEs
CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-290Authentication Bypass by Spoofing2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE21 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan