CVE-2024-51567

CyberPanel's incorrect default permissions allowed unauthenticated remote attackers to execute commands as root, leading to active exploitation and ransomware incidents.

CyberPanel shipped with incorrect default file permissions, enabling remote, unauthenticated attackers to gain root access and execute arbitrary commands. This is a critical failure for DIB organizations because it represents a severe, avoidable exposure that directly enables ransomware and data breaches, violating CMMC/NIST 800-171 requirements for secure configuration and patch management. Organizations must verify default configurations and apply patches immediately to prevent similar compromises.

Shame score — The vendor shipped with a critical, unpatched vulnerability that was actively exploited in the wild for ransomware, demonstrating severe negligence and a complete failure to secure default configurations.