A vulnerability marked as very critical has been reported in usmannasir CyberPanel up to 2.4.3. The impacted element is an unknown function of the component Remote Backup Transfer Feature. Performing a manipulation results in os command injection.
This vulnerability is reported as CVE-2026-71966. The attack is possible to be carried out remotely. No exploit exists.
To fix this issue, it is recommended to deploy a patch.
