CVE-2026-88893Suited to automated attack · CISA
OpenPanel through 2.3.0 Unauthenticated Share Lookup Information Disclosure
CVSS score
8.7
EPSS probability
%0.5
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.4
CVE-2026-93985
OpenPanel js-runtime through 2.3.0 JavaScript Template Sandbox Escape RCE
O
Patch status unknownEPSS %1
8.7
CVE-2026-85610
OpenPanel before 2.3.0 Remote Code Execution via chart formulas
O
Patch status unknownEPSS %1
8.7
CVE-2026-85612
OpenPanel before 2.3.0 SSRF via favicon and og endpoints
O
Patch status unknownEPSS %0
6.9
CVE-2026-85609
Openpanel before 2.3.0 SSRF via Site Checker Endpoint
O
Patch status unknownEPSS %1
8.4
CVE-2026-85613
OpenPanel before 2.3.0 Unauthenticated XSS via SVG Favicon Proxy
O
Patch status unknownEPSS %0
8.4
CVE-2026-88890
OpenPanel through 2.3.0 SQL Injection via unvalidated profile filter column identifier
O
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-88893"