Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how hestiacp compares to other vendors in security performance

View Risk Score →

hestiacp HestiaCPHestiaCP < 1.9.5 Stored XSS via DNS Record Management Interface

Risk 34
Severity
5.1
First published (updated )
CVE-2025-30008

hestiacp HestiaCPHestiaCP < 1.9.5 Authenticated OS Command Injection via DNS Record Management

Risk 79
Severity
8.7
First published (updated )
CVE-2025-30007

hestiacp HestiaCPHestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Header

Risk 47
Severity
8.7
First published (updated )
CVE-2026-43634

hestiacp HestiaCPHestiaCP 1.9.0-1.9.4 Deserialization RCE via Web Terminal

Risk 87
Severity
9.5
First published (updated )
CVE-2026-43633

hestiacp Control PanelPrivilege Chaining in hestiacp/hestiacp

Risk 53
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2023-5839
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

hestiacp HestiaCPCross-site Scripting (XSS) - Stored in hestiacp/hestiacp

Risk 34
Severity
5.4
First published (updated )
CVE-2023-4517

hestiacp HestiaCPCross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

Risk 38
Severity
6.1
First published (updated )
CVE-2023-5084

hestiacp Control PanelCross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

Risk 38
Severity
6.1
First published (updated )
CVE-2023-3479

hestiacp Control PanelXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2021-30071

hestiacp HestiaCPAn issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install package…

Risk 43
Severity
7.5
First published (updated )
CVE-2021-30070
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

hestiacp Control PanelCode Injection in hestiacp/hestiacp

Risk 79
Severity
8.8
First published (updated )
CVE-2022-2636

hestiacp Control PanelIncorrect Privilege Assignment in hestiacp/hestiacp

Risk 72
Severity
9.1
First published (updated )
CVE-2022-2626

hestiacp Control PanelOS Command Injection in hestiacp/hestiacp

Risk 82
Severity
9.9
First published (updated )
CVE-2022-2550

hestiacp Control PanelCommand Injection Vulnerability in hestiacp/hestiacp

Risk 82
Severity
9.9
First published (updated )
CVE-2022-1509

hestiacp Control PanelReflected Cross-site Scripting (XSS) Vulnerability in hestiacp/hestiacp

Risk 38
Severity
6.1
First published (updated )
CVE-2022-0986
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

hestiacp Control PanelCross-site Scripting (XSS) - Generic in hestiacp/hestiacp

Risk 38
Severity
6.1
First published (updated )
CVE-2022-0752

hestiacp Control PanelCross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

Risk 61
Severity
6.6
First published (updated )
CVE-2022-0838

hestiacp Control PanelCross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

Risk 38
Severity
6.1
First published (updated )
CVE-2022-0753

hestiacp Control PanelUse of Wrong Operator in String Comparison in hestiacp/hestiacp

Risk 86
Severity
9.8
First published (updated )
CVE-2021-3797

hestiacp Control PanelHestia Control Panel 1.3.5 and below, in a shared-hosting environment, sometimes allows remote authe…

Risk 34
Severity
5.5
First published (updated )
CVE-2021-27231
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

hestiacp Control PanelIn the Password Reset Module in VESTA Control Panel through 0.9.8-25 and Hestia Control Panel before…

Risk 37
Severity
6.5
First published (updated )
CVE-2020-10966

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203