pelican vulnerabilities

Products

• panel 1

Latest pelican CVEs

Newest publication first

1. CVE-2026-92762 Pelican Panel before 1.0.0-beta35 Authorization Bypass via Startup

   Published 2026-09-16

   High·CVSS 8.7 EPSS 0.65%

   Pelican Panel versions before 1.0.0-beta35 enforce startup write permissions only through disabled form controls rather than server-side authorization checks. Attackers with startup.read permission can craft Livewire state updates to invoke afterStateUpdated callbacks and modify...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.