Ransomwarecritical
Ransomware hits web hosting servers via vulnerable CyberPanel instances
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-51378+1 related CVE | Unauthenticated Command Injection in CyberPanel | 9.8 | 95% | KEVRansomwarePoC ×2 | KEV |
From the original article
2 min read at helpnetsecurity.com
A threat actor – or possibly several – has hit approximately 22,000 vulnerable instances of CyberPanel and encrypted files on the servers running it with the PSAUX and other ransomware. CyberPanel is a widely used open-source control panel that’s used for managing servers used for hosting websites. Two critical command injection vulnerabilities ( CVE-2024-51378 and CVE-2024-51567 ) affecting CyberPanel versions 2.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.