Control Web Panel

15 CVEs in 1 Control Web Panel product, including Control Web Panel. Newest: CVE-2026-77881 (2026-11-02). Severity, EPSS and public exploits for each.

Control Web Panel products with known CVEs

ProductCVEs
Control Web Panel15
Control Web Panel CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-77881Medium6.22026-11-02Control Web Panel (CWP) before webpanel_version 1.30 contains a blind SQL injection vulnerability in an unauthenticated loopback API route that connects to MyS…
CVE-2026-77880High8.42026-11-02Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the loopback API password change route /newpass/, which…
CVE-2026-77879High7.72026-11-02Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API authentication gate access_token(), which conne…
CVE-2026-77878High8.42026-11-02Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API database restore route /v1/restoredatab…
CVE-2026-77877High8.42026-11-02Control Web Panel (CWP) before webpanel_version 1.30 contains a missing authentication vulnerability that allows attackers able to reach the loopback API servi…
CVE-2026-77876Critical9.82026-11-02Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the protected_directory user panel module that allows at…
CVE-2026-104080High8.42026-11-02Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API /valid_token/ route that allows unauthe…
CVE-2026-73697High8.82026-11-02Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection vulnerability in the phpini_editor user panel mo…
CVE-2026-73696Critical9.12026-11-02Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user panel authentication flow (CWPUserIndex) th…
CVE-2026-73695High8.82026-11-02Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users/index.php that allows attackers to include arbit…
CVE-2026-57517Critical9.82026-07-01Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL queries…
CVE-2023-42123High8.82024-05-03Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
CVE-2023-42122High7.82024-05-03Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affec…
CVE-2023-42121Critical9.82024-05-03Control Web Panel Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected…
CVE-2023-42120High8.82024-05-03Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o…