Is CVE-2026-84715 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-84715?

CVE-2026-84715 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-84715

Description

FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController updateSubuser handler, allowing authenticated subusers to modify their own permission records. A subuser with minimal permissions can send a crafted request to grant themselves full server control, enabling unauthorized access to sensitive data, backups, and server configuration.