[ Vendor · 10 CVEs ]
Control Web Panel
CVEs affecting Control Web Panel published in the last 30 days, plus any Control Web Panel CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-77881 | 2 Nov 2026 | CVSS 5.5 | Control Web PanelControl Web Panel (CWP) before webpanel_version 1.29 contains a blind SQL injection vulnerability in an unauthenticated loopback API route that… | |
| CVE-2026-77876 | 2 Nov 2026 | CVSS 8.8 | Control Web PanelControl Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the protected_directory user panel module that… | |
| CVE-2026-77877 | 2 Nov 2026 | CVSS 7.8 | Control Web PanelControl Web Panel (CWP) before webpanel_version 1.29 contains a missing authentication vulnerability that allows attackers able to reach the loopback… | |
| CVE-2026-77878 | 2 Nov 2026 | CVSS 7.8 | Control Web PanelControl Web Panel (CWP) before webpanel_version 1.29 contains an OS command injection vulnerability in the loopback API database restore route… | |
| CVE-2026-77879 | 2 Nov 2026 | CVSS 7.1 | Control Web PanelControl Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API authentication gate access_token()… | |
| CVE-2026-77880 | 2 Nov 2026 | CVSS 7.8 | Control Web PanelControl Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the loopback API password change route… | |
| CVE-2026-104080 | 2 Nov 2026 | CVSS 7.8 | Control Web PanelControl Web Panel (CWP) before webpanel_version 1.29 contains an OS command injection vulnerability in the loopback API /valid_token/ route that… | |
| CVE-2026-73695 | 2 Nov 2026 | CVSS 8.8 | Control Web PanelControl Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users/index.php that allows attackers to… | |
| CVE-2026-73696 | 2 Nov 2026 | CVSS 8.1 | Control Web PanelControl Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user panel authentication flow… | |
| CVE-2026-73697 | 2 Nov 2026 | CVSS 8.8 | Control Web PanelControl Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection vulnerability in the phpini_editor… |