CVE-2026-65917

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-65917
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-65917.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-65917
Published
2026-07-23T15:59:48.986Z
Modified
2026-07-28T03:55:49.425896814Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
CyberPanel IncBackups IDOR via Sequential Backup ID
Details

CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference (IDOR) vulnerability in the IncBackups application's incremental-backup handlers (deleteBackup, fetchRestorePoints, and restorePoint) that allows authenticated panel users to access or manipulate other tenants' backup resources by supplying an attacker-controlled globally sequential IncJob integer ID that is never re-scoped to the authorized domain. Attackers can enumerate sequential backup IDs to read another tenant's backup metadata, irrecoverably delete another tenant's backup snapshots, or trigger unauthorized restoration of another tenant's backup job with root privileges.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65917.json",
    "cwe_ids": [
        "CWE-639"
    ]
}
References

Affected packages

Git / github.com/usmannasir/cyberpanel

Affected ranges

Type
GIT
Repo
https://github.com/usmannasir/cyberpanel
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
8c706c079846ec67dfaf6c31fa7c89c8e593e8a0
Fixed
b1984603f9b0099b39bca46fea176e53b6d4d601
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.9.1"
        }
    ],
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

Other
single_mysql
v1.*
v1.7
v1.8.7
v1.8.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-65917.json"