CVE-2026-50980

Published: Ago 28, 2026 Last Modified: Ago 28, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record

http://osbil.com
http://osbil.com
https://github.com/bugresearch/CVE-2026-50980
https://github.com/bugresearch/CVE-2026-50980
http://womopanel.com
http://womopanel.com