Hestia Control Panel vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Hestia Control Panel products: 1 record(s), with severity, exploitation and fixes.

Hestia Control Panel 1

Exploited only (KEV) →

CVE-2021-47871 High · 8.8 CWE-73 Jan 21, 2026

Hestia Control Panel 1.3.2 - Arbitrary File Write

Hestia Control Panel 1.3.2 contains an arbitrary file write vulnerability that allows authenticated attackers to write files to arbitrary locations using the API index.php endpoint. Attackers can exploit the v-make-tmp-file command to write SSH keys or other content to specific file paths on the server.