CVE-2026-50980 | CyberRota

CyberRota Analysis

AI-Generated

A Cross-Site Scripting (XSS) vulnerability exists in the DNS lookup/management component of oPanel prior to version 1.20.25, allowing remote attackers to execute arbitrary JavaScript through a malicious DNS TXT record. This could lead to session hijacking and unauthorized access to user sessions. Organizations using affected versions of oPanel should prioritize patching to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE

CVE-2026-50980

Severity

MEDIUM

CVSS

6.1

EPSS

0.35%

Java

Original NVD Description

Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record