CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-66508

1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration which trusts all IP addresses as proxies (TrustedProxies = 0.0.0.0/0), allowing any client to spoof the X-Forwarded-For header. Since all IP-based access controls (AllowIPs, API whitelists, localhost-only checks) rely on ClientIP(), attackers can bypass these protections by simply sending X-Forwarded-For: 127.0.0.1 or any whitelisted IP. This renders all IP-based security controls ineffective. This issue is fixed in version 2.0.14.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 6.7%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2025-66508

Fit2cloud » 1panel » Version: N/A

cpe:2.3:a:fit2cloud:1panel:-
Fit2cloud » 1panel » Version: 1.0.0

cpe:2.3:a:fit2cloud:1panel:1.0.0
Fit2cloud » 1panel » Version: 1.0.1

cpe:2.3:a:fit2cloud:1panel:1.0.1
Fit2cloud » 1panel » Version: 1.0.2

cpe:2.3:a:fit2cloud:1panel:1.0.2
Fit2cloud » 1panel » Version: 1.0.3

cpe:2.3:a:fit2cloud:1panel:1.0.3
Fit2cloud » 1panel » Version: 1.0.4

cpe:2.3:a:fit2cloud:1panel:1.0.4
Fit2cloud » 1panel » Version: 1.0.5

cpe:2.3:a:fit2cloud:1panel:1.0.5
Fit2cloud » 1panel » Version: 1.1.0

cpe:2.3:a:fit2cloud:1panel:1.1.0
Fit2cloud » 1panel » Version: 1.1.1

cpe:2.3:a:fit2cloud:1panel:1.1.1
Fit2cloud » 1panel » Version: 1.1.2

cpe:2.3:a:fit2cloud:1panel:1.1.2
Fit2cloud » 1panel » Version: 1.1.3

cpe:2.3:a:fit2cloud:1panel:1.1.3
Fit2cloud » 1panel » Version: 1.10.1-lts

cpe:2.3:a:fit2cloud:1panel:1.10.1-lts
Fit2cloud » 1panel » Version: 1.10.10-lts

cpe:2.3:a:fit2cloud:1panel:1.10.10-lts
Fit2cloud » 1panel » Version: 1.10.12-lts

cpe:2.3:a:fit2cloud:1panel:1.10.12-lts
Fit2cloud » 1panel » Version: 1.10.13-lts

cpe:2.3:a:fit2cloud:1panel:1.10.13-lts
Fit2cloud » 1panel » Version: 1.10.14-lts

cpe:2.3:a:fit2cloud:1panel:1.10.14-lts
Fit2cloud » 1panel » Version: 1.10.15-lts

cpe:2.3:a:fit2cloud:1panel:1.10.15-lts
Fit2cloud » 1panel » Version: 1.10.16-lts

cpe:2.3:a:fit2cloud:1panel:1.10.16-lts
Fit2cloud » 1panel » Version: 1.10.17-lts

cpe:2.3:a:fit2cloud:1panel:1.10.17-lts
Fit2cloud » 1panel » Version: 1.10.18-lts

cpe:2.3:a:fit2cloud:1panel:1.10.18-lts
Fit2cloud » 1panel » Version: 1.10.19-lts

cpe:2.3:a:fit2cloud:1panel:1.10.19-lts
Fit2cloud » 1panel » Version: 1.10.2-lts

cpe:2.3:a:fit2cloud:1panel:1.10.2-lts
Fit2cloud » 1panel » Version: 1.10.20-lts

cpe:2.3:a:fit2cloud:1panel:1.10.20-lts
Fit2cloud » 1panel » Version: 1.10.21-lts

cpe:2.3:a:fit2cloud:1panel:1.10.21-lts
Fit2cloud » 1panel » Version: 1.10.22-lts

cpe:2.3:a:fit2cloud:1panel:1.10.22-lts
Fit2cloud » 1panel » Version: 1.10.23-lts

cpe:2.3:a:fit2cloud:1panel:1.10.23-lts
Fit2cloud » 1panel » Version: 1.10.24-lts

cpe:2.3:a:fit2cloud:1panel:1.10.24-lts
Fit2cloud » 1panel » Version: 1.10.25-lts

cpe:2.3:a:fit2cloud:1panel:1.10.25-lts
Fit2cloud » 1panel » Version: 1.10.26-lts

cpe:2.3:a:fit2cloud:1panel:1.10.26-lts
Fit2cloud » 1panel » Version: 1.10.27-lts

cpe:2.3:a:fit2cloud:1panel:1.10.27-lts
Fit2cloud » 1panel » Version: 1.10.28-lts

cpe:2.3:a:fit2cloud:1panel:1.10.28-lts
Fit2cloud » 1panel » Version: 1.10.29-lts

cpe:2.3:a:fit2cloud:1panel:1.10.29-lts
Fit2cloud » 1panel » Version: 1.10.3-lts

cpe:2.3:a:fit2cloud:1panel:1.10.3-lts
Fit2cloud » 1panel » Version: 1.10.30-lts

cpe:2.3:a:fit2cloud:1panel:1.10.30-lts
Fit2cloud » 1panel » Version: 1.10.31-lts

cpe:2.3:a:fit2cloud:1panel:1.10.31-lts
Fit2cloud » 1panel » Version: 1.10.32-lts

cpe:2.3:a:fit2cloud:1panel:1.10.32-lts
Fit2cloud » 1panel » Version: 1.10.4-lts

cpe:2.3:a:fit2cloud:1panel:1.10.4-lts
Fit2cloud » 1panel » Version: 1.10.5-lts

cpe:2.3:a:fit2cloud:1panel:1.10.5-lts
Fit2cloud » 1panel » Version: 1.10.6-lts

cpe:2.3:a:fit2cloud:1panel:1.10.6-lts
Fit2cloud » 1panel » Version: 1.10.7-lts

cpe:2.3:a:fit2cloud:1panel:1.10.7-lts
Fit2cloud » 1panel » Version: 1.10.8-lts

cpe:2.3:a:fit2cloud:1panel:1.10.8-lts
Fit2cloud » 1panel » Version: 1.10.9-lts

cpe:2.3:a:fit2cloud:1panel:1.10.9-lts
Fit2cloud » 1panel » Version: 1.2.0

cpe:2.3:a:fit2cloud:1panel:1.2.0
Fit2cloud » 1panel » Version: 1.2.1

cpe:2.3:a:fit2cloud:1panel:1.2.1
Fit2cloud » 1panel » Version: 1.2.2

cpe:2.3:a:fit2cloud:1panel:1.2.2
Fit2cloud » 1panel » Version: 1.2.3

cpe:2.3:a:fit2cloud:1panel:1.2.3
Fit2cloud » 1panel » Version: 1.2.4

cpe:2.3:a:fit2cloud:1panel:1.2.4
Fit2cloud » 1panel » Version: 1.3.0

cpe:2.3:a:fit2cloud:1panel:1.3.0
Fit2cloud » 1panel » Version: 1.3.1

cpe:2.3:a:fit2cloud:1panel:1.3.1
Fit2cloud » 1panel » Version: 1.3.2

cpe:2.3:a:fit2cloud:1panel:1.3.2
Fit2cloud » 1panel » Version: 1.3.3

cpe:2.3:a:fit2cloud:1panel:1.3.3
Fit2cloud » 1panel » Version: 1.3.4

cpe:2.3:a:fit2cloud:1panel:1.3.4
Fit2cloud » 1panel » Version: 1.3.5

cpe:2.3:a:fit2cloud:1panel:1.3.5
Fit2cloud » 1panel » Version: 1.3.6

cpe:2.3:a:fit2cloud:1panel:1.3.6
Fit2cloud » 1panel » Version: 1.4.0

cpe:2.3:a:fit2cloud:1panel:1.4.0
Fit2cloud » 1panel » Version: 1.4.1

cpe:2.3:a:fit2cloud:1panel:1.4.1
Fit2cloud » 1panel » Version: 1.4.2

cpe:2.3:a:fit2cloud:1panel:1.4.2
Fit2cloud » 1panel » Version: 1.4.3

cpe:2.3:a:fit2cloud:1panel:1.4.3
Fit2cloud » 1panel » Version: 1.5.0

cpe:2.3:a:fit2cloud:1panel:1.5.0
Fit2cloud » 1panel » Version: 1.5.1

cpe:2.3:a:fit2cloud:1panel:1.5.1
Fit2cloud » 1panel » Version: 1.5.2

cpe:2.3:a:fit2cloud:1panel:1.5.2
Fit2cloud » 1panel » Version: 1.5.3

cpe:2.3:a:fit2cloud:1panel:1.5.3
Fit2cloud » 1panel » Version: 1.5.4

cpe:2.3:a:fit2cloud:1panel:1.5.4
Fit2cloud » 1panel » Version: 1.5.5

cpe:2.3:a:fit2cloud:1panel:1.5.5
Fit2cloud » 1panel » Version: 1.6.0

cpe:2.3:a:fit2cloud:1panel:1.6.0
Fit2cloud » 1panel » Version: 1.6.1

cpe:2.3:a:fit2cloud:1panel:1.6.1
Fit2cloud » 1panel » Version: 1.6.2

cpe:2.3:a:fit2cloud:1panel:1.6.2
Fit2cloud » 1panel » Version: 1.7.0

cpe:2.3:a:fit2cloud:1panel:1.7.0
Fit2cloud » 1panel » Version: 1.7.1

cpe:2.3:a:fit2cloud:1panel:1.7.1
Fit2cloud » 1panel » Version: 1.7.2

cpe:2.3:a:fit2cloud:1panel:1.7.2
Fit2cloud » 1panel » Version: 1.7.3

cpe:2.3:a:fit2cloud:1panel:1.7.3
Fit2cloud » 1panel » Version: 1.7.4

cpe:2.3:a:fit2cloud:1panel:1.7.4
Fit2cloud » 1panel » Version: 1.8.0

cpe:2.3:a:fit2cloud:1panel:1.8.0
Fit2cloud » 1panel » Version: 1.8.1

cpe:2.3:a:fit2cloud:1panel:1.8.1
Fit2cloud » 1panel » Version: 1.8.2

cpe:2.3:a:fit2cloud:1panel:1.8.2
Fit2cloud » 1panel » Version: 1.8.3

cpe:2.3:a:fit2cloud:1panel:1.8.3
Fit2cloud » 1panel » Version: 1.8.4

cpe:2.3:a:fit2cloud:1panel:1.8.4
Fit2cloud » 1panel » Version: 1.8.5

cpe:2.3:a:fit2cloud:1panel:1.8.5
Fit2cloud » 1panel » Version: 1.9.0

cpe:2.3:a:fit2cloud:1panel:1.9.0
Fit2cloud » 1panel » Version: 1.9.1

cpe:2.3:a:fit2cloud:1panel:1.9.1
Fit2cloud » 1panel » Version: 1.9.2

cpe:2.3:a:fit2cloud:1panel:1.9.2
Fit2cloud » 1panel » Version: 1.9.3

cpe:2.3:a:fit2cloud:1panel:1.9.3
Fit2cloud » 1panel » Version: 1.9.4

cpe:2.3:a:fit2cloud:1panel:1.9.4
Fit2cloud » 1panel » Version: 1.9.5

cpe:2.3:a:fit2cloud:1panel:1.9.5
Fit2cloud » 1panel » Version: 1.9.6

cpe:2.3:a:fit2cloud:1panel:1.9.6
Fit2cloud » 1panel » Version: 2.0.0

cpe:2.3:a:fit2cloud:1panel:2.0.0
Fit2cloud » 1panel » Version: 2.0.1

cpe:2.3:a:fit2cloud:1panel:2.0.1
Fit2cloud » 1panel » Version: 2.0.10

cpe:2.3:a:fit2cloud:1panel:2.0.10
Fit2cloud » 1panel » Version: 2.0.11

cpe:2.3:a:fit2cloud:1panel:2.0.11
Fit2cloud » 1panel » Version: 2.0.12

cpe:2.3:a:fit2cloud:1panel:2.0.12
Fit2cloud » 1panel » Version: 2.0.13

cpe:2.3:a:fit2cloud:1panel:2.0.13
Fit2cloud » 1panel » Version: 2.0.2

cpe:2.3:a:fit2cloud:1panel:2.0.2
Fit2cloud » 1panel » Version: 2.0.3

cpe:2.3:a:fit2cloud:1panel:2.0.3
Fit2cloud » 1panel » Version: 2.0.4

cpe:2.3:a:fit2cloud:1panel:2.0.4
Fit2cloud » 1panel » Version: 2.0.5

cpe:2.3:a:fit2cloud:1panel:2.0.5
Fit2cloud » 1panel » Version: 2.0.6

cpe:2.3:a:fit2cloud:1panel:2.0.6
Fit2cloud » 1panel » Version: 2.0.7

cpe:2.3:a:fit2cloud:1panel:2.0.7
Fit2cloud » 1panel » Version: 2.0.8

cpe:2.3:a:fit2cloud:1panel:2.0.8
Fit2cloud » 1panel » Version: 2.0.9

cpe:2.3:a:fit2cloud:1panel:2.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-66508

Products

Pricing

Contact Us