CVE-2023-36630: Mgt-Commerce Cloudpanel

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.

Affected products

• Mgt-Commerce Cloudpanel: from 2.0.0, before 2.3.1 (fixed in 2.3.1)

Published 2023-06-25. Last modified 2026-06-17.