Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

RULE（RULE ID：346417）

Rule General Information


Release Date:		2026-10-12

Rule Name:		KubePi Unauthenticated SSO Configuration Access Vulnerability (CVE-2026-65956)

Severity:

CVE ID:

Rule Protection Details


Description:		1Panel-dev KubePi is a Kubernetes management panel from the 1Panel-dev organization. 1Panel-dev KubePi 1.6.15 and earlier are affected by an authorization vulnerability. This vulnerability arises from improper access control in the SSO configuration API, which may allow unauthorized or low-privileged users to view or modify authentication configurations, leading to account takeover or privilege escalation. In addition, the SSO connection test feature can be abused for server-side request forgery, and the user list API does not clear authentication-related fields.

Impact:		An attacker could exploit this vulnerability to have unspecified effect.

Affected OS:		Windows, Linux, Others

Reference:		https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-wjrh-4j52-c664 https://github.com/1Panel-dev/KubePi/commit/b62b41f82659e36102fccd215b13264b2035f1ea https://github.com/1Panel-dev/KubePi/releases/tag/v2.0.0

Solutions

Refer to the announcement or patch by the vendor.