Posted by Bryan Ramirez via Fulldisclosure on Oct 15Advisory ID: VESTACP-2026-001 / GHSA-m2mc-xwq7-pw72 Product: Vesta Control Panel (VestaCP) Versions: <= 0.9.8-26 (unmaintained since 2019-09; no upstream fix exists) Severity: Critical - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H = 9.9 CWE: CWE-78 (OS Command Injection), CWE-95 (Eval Injection) Reporter: Bryan Ramirez - SYSDOP LLC SUMMARY ------- VestaCP stores per-account...