CVE-2026-50980

UNKNOWN View on NVD ↗

Description

Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record

References

http://osbil.com
http://womopanel.com
https://github.com/bugresearch/CVE-2026-50980

Published: Aug 28, 2026 20:18 UTC Modified: Aug 28, 2026 20:18 UTC