CVE-2026-71964

Name of the Vulnerable Software and Affected Versions CyberPanel version 2.4.3

Description The file manager component allows authenticated attackers to read sensitive system files. This occurs because the application fails to validate symbolic links (shortcuts that point to another file or directory) within a ZIP archive before extraction. By uploading a crafted ZIP archive containing symbolic links targeting paths outside the user's home directory, an attacker can cause these links to persist on disk and access the targeted files through the web interface.

Recommendations Update CyberPanel version 2.4.3 to the version containing commit eca0c3c.