CVE-2021-47949

HighPublic PoC

Published: 10 May 2026

Published

10 May 2026

Modified

10 May 2026

KEV Added

—

Patch

—

CVSS Score 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score N/A

Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-47949 is a high-severity Link Following (CWE-59) vulnerability in Cyberpanel (inferred from references). Its CVSS base score is 8.8 (High).

Operationally, it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

NVD Description

CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink attacks through the filemanager controller endpoint. Attackers can manipulate the completeStartingPath parameter in POST requests to /filemanager/controller to…

create symbolic links, read sensitive files like database credentials, and execute arbitrary shell commands through the /websites/fetchFolderDetails endpoint.

Deeper analysisAI

Automated synthesis unavailable for this CVE.