4xmen

2 CVEs in 2 4xmen products, including Pm2panel, Xshop. Newest: CVE-2026-49849 (2026-08-21). Severity, EPSS and public exploits for each.

4xmen products with known CVEs

ProductCVEs
Pm2panel1
Xshop1
4xmen CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-49849Critical9.12026-08-21xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allows an authenticated administrator to up…
CVE-2026-72573High8.82026-08-10An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authenticated remote attacker to execute arbitrary system commands on the host…