CVE-2024-44765

An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.4.2 allows low-privilege users to bypass access controls and gain unauthorized access to sensitive configuration files and administrative functionality.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.66% chance of exploitation in the next 30 days, 49th percentile

Published

2024-11-08

Updated

2026-07-05

Proof-of-concept exploits (1)

• josephgodwinkimani/cloudpanel-2.4.2-CVE-2024-44765-recovery1★ · 2025-01-27

References

• CVE Record
• NVD entry

Related

• CVE-2024-44762
• CVE-2024-4477
• CVE-2024-4475
• CVE-2024-44793
• CVE-2024-4474
• CVE-2024-44794