Vestacp

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 26
    Known Exploited: 0
    3
    Critical Level Threats
    12
    High Level Threats
    10
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2020-36948

    VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation

    Last Modified: Apr 15, 2026
    Published: Jan 27, 2026

    CVE-2021-47873

    VestaCP < 0.9.8-25 - Stored Cross-Site Scripting

    Last Modified: Apr 15, 2026
    Published: Jan 21, 2026

    CVE-2018-25117

    VestaCP Debian Installer Malicious Backdoor Supply Chain Compromise

    Last Modified: Apr 15, 2026
    Published: Oct 15, 2025

    CVE-2022-3967

    Vesta Control Panel sed main.sh argument injection

    Last Modified: Apr 15, 2025
    Published: Nov 13, 2022

    CVE-2021-46850

    myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. An authenticated and remote administrative user can execute arbitrary commands via the v_sftp_license parameter when sending HTTP POST requests to the /edit/server endpoint.

    Last Modified: May 07, 2025
    Published: Oct 24, 2022
    Items Per Page