CVE-2026-50980
Cross‑Site Scripting vulnerability in oPanel DNS lookup enabling session hijacking via crafted DNS TXT record
Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record
CVSS 3.1 · 6.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products