How severe is CVE-2026-29810?

CVE-2026-29810 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.

Is CVE-2026-29810 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (22nd percentile), an estimate of the probability of exploitation in the next 30 days.

How do I fix CVE-2026-29810?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2026-29810 published?

CVE-2026-29810 was published on 2026-09-13 and last updated on 2026-09-16.

CVE-2026-29810

CVE-2026-29810 is a medium-severity vulnerability with a CVSS 3.x base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-390.

Key facts

Severity: Medium (CVSS 3.x base score 4.3)
EPSS exploit prediction: 0% (22nd percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-390
Published: 2026-09-13
Last modified: 2026-09-16

Description

CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.

Frequently asked questions

What is CVE-2026-29810?: CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.
How severe is CVE-2026-29810?: CVE-2026-29810 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2026-29810 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (22nd percentile), an estimate of the probability of exploitation in the next 30 days.
How do I fix CVE-2026-29810?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2026-29810 published?: CVE-2026-29810 was published on 2026-09-13 and last updated on 2026-09-16.

References

https://github.com/usmannasir/cyberpanel/commit/0a099b1b193946555fbdd387a28486b1521f9961

Other CWE-390 vulnerabilities

CVE-2026-104480 — Critical (CVSS 9.4): Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an…
CVE-2026-53434 — Critical (CVSS 9.1): Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based…
CVE-2026-76642 — High (CVSS 7.8): util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks,…
CVE-2025-46367 — High (CVSS 7.8): Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error Condition Without…
CVE-2024-27919 — High (CVSS 7.5): Envoy is a cloud-native, open-source edge and service proxy. In versions 1.29.0 and 1.29.1, theEnvoy HTTP/2 protocol…
CVE-2025-26465 — Medium (CVSS 6.8): A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be…

Browse all CWE-390 vulnerabilities →