CVE-2024-5958: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Sof

Q: How do I fix CVE-2024-5958?

panel: upgrade to 2.3.24. Exact commands for each OS are on this page.

Q: Is CVE-2024-5958 being exploited?

CVE-2024-5958 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2024-5958 affect?

CVE-2024-5958 affects panel. Severity is high (CVSS 8.8). Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection. This issue affects Panel: before v2.3.24.

This month

HIGH 8.8UPGRADE

CVE-2024-5958 is a high-severity flaw (CVSS 8.8) affecting panel. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection. This issue affects Panel: before v2.3.24.

Why this priority

High severity

A fixed release or distro patch exists.

Risk facts

CVSS score	8.8 (High)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	0.5% (top 57%)
CISA exploited list	No
Weakness	CWE-89
Published	2024-09-18
Last modified	2026-06-17

Publisher (CNA): Computer Emergency Response Team of the Republic of Turkey · Vendor: elizsoftware

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2024-09-18 15:15 UTCPublished CVE record published
2026-06-17 08:16 UTCUpdated Record last modified

elizsoftware panel UPGRADE

Affected: < 2.3.24

Fixed in: 2.3.24

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy panel || rpm -q panel || panel --version

2. UPGRADE to 2.3.24 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade panel

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade panel

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2024-5958?

panel: upgrade to 2.3.24. Exact commands for each OS are on this page.

Is CVE-2024-5958 being exploited?

CVE-2024-5958 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2024-5958 affect?

CVE-2024-5958 affects panel. Severity is high (CVSS 8.8). Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection. This issue affects Panel: before v2.3.24.

How urgent is CVE-2024-5958?

Priority 42/100. High severity

Related CVEs

CVE-2026-5332 LOW 3.5 DOWNGRADE A vulnerability was identified in Xiaopi Panel 1.0.0
CVE-2025-69197 MEDIUM 6.5 UPGRADE Pterodactyl is a free, open-source game server management panel
CVE-2025-68954 MEDIUM 5.4 UPGRADE UPGRADE Pterodactyl is a free, open-source game server management panel
CVE-2026-2122 MEDIUM 6.3 UPGRADE A security flaw has been discovered in Xiaopi Panel up to 20260126
CVE-2025-69198 MEDIUM 6.5 UPGRADE Pterodactyl is a free, open-source game server management panel

References

← Back to latest CVEs