Panel Vulnerabilities

pip ML UI

AI Threat Alert tracks 76 known vulnerabilities in Panel, 20 rated critical — an AI/ML ml ui in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources

Risk Score

Total CVEs

Critical

pip

Ecosystem

Sep 23, 2026

Last CVE

68%

Patch Rate

15d

Avg Time to Patch

5,777 stars 626 forks 1,109 issues 505 dependents Last push Sep 26, 2026

View on GitHub

OpenSSF Scorecard 6.8/10

Known Vulnerabilities (69 total, page 2 of 3)

Severity CVE ID Summary CVSS Published

MEDIUM GHSA-j7f5-gfqm-pcx3 Pterodactyl panel: email endpoint leaks user enumeration -- Jun 26, 2026 HIGH CVE-2026-55477 3X-UI: authenticated file write leads to RCE 7.2 Jun 25, 2026 CRITICAL CVE-2026-54158 SiYuan: XSS→RCE via workspace sync in Electron app 9.9 Jun 24, 2026 MEDIUM GHSA-7cqp-7cfv-6c3q AVideo Meet: Stored XSS via User-Agent → admin takeover -- Jun 23, 2026 CRITICAL CVE-2018-25117 VestaCP: backdoored installer, not an AI/ML CVE -- Oct 15, 2025 MEDIUM CVE-2026-48500 Filament: unauth file upload drains disk/inflates costs 6.5 Jun 22, 2026 HIGH CVE-2026-9029 Grafana: stored XSS in geomap bypasses CVE-2023-0507 fix 7.3 Jun 22, 2026 HIGH CVE-2026-54317 Home Assistant Konnected: auth bypass leaks alarm panel state 7.6 Jun 19, 2026 MEDIUM CVE-2026-49274 Kirby CMS: missing auth exposes restricted page titles -- Jun 18, 2026 HIGH CVE-2026-49276 Kirby CMS: XSS via writer field malicious links -- Jun 18, 2026 MEDIUM CVE-2026-50188 Kirby CMS: CRLF injection overrides outbound HTTP headers -- Jun 18, 2026 HIGH CVE-2026-54002 Kirby CMS: stored XSS bypasses DOM sanitizer via unwrap flaw -- Jun 18, 2026 UNKNOWN CVE-2026-54003 Kirby CMS: admin takeover via reverse proxy header bypass -- Jun 18, 2026 HIGH CVE-2025-0616 Netsis Panel: unauthenticated SQLi enables data exfiltration 8.2 Oct 3, 2025 MEDIUM CVE-2025-7014 Menu Panel: session fixation enables session hijacking 5.7 Jan 29, 2026 MEDIUM CVE-2025-7013 Menu Panel: IDOR auth bypass exposes confidential data 5.7 Jan 29, 2026 CRITICAL CVE-2025-14014 Smart Panel: unauthenticated file upload enables RCE 9.8 Feb 12, 2026 CRITICAL CVE-2024-6684 Nova Panel N7: auth bypass via alternate channel (EOL) -- Aug 12, 2024 CRITICAL CVE-2024-5958 Panel: SQL injection enables OS command execution -- Sep 18, 2024 CRITICAL CVE-2024-5960 Panel: plaintext credential storage enables domain compromise 9.8 Sep 18, 2024 CRITICAL CVE-2024-5959 Panel: Stored XSS enables session hijack in ML dashboards -- Sep 18, 2024 CRITICAL CVE-2024-6878 Panel: file exposure enables sensitive ML data collection -- Sep 18, 2024 CRITICAL CVE-2024-6877 Panel: Reflected XSS enables session hijack in ML UI -- Sep 18, 2024 MEDIUM CVE-2019-6576 SIMATIC WinCC: TLS key disclosure enables traffic decryption 6.5 May 14, 2019 CRITICAL CVE-2024-13147 B2B Login Panel: SQLi enables unauthenticated DB access 9.8 Mar 5, 2025

Showing 26–50 of 69

← Previous Next →

Frequently asked questions

What is Panel?

Panel is an AI/ML ml ui tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does Panel have?

Panel has 76 known CVEs, 20 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Panel distributed in?

Panel is distributed via the pip ecosystem and categorized as ml ui.

Where does the Panel vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Panel?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Panel in your stack

Get instant alerts when new vulnerabilities affect Panel. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring