Control Web Panel vulnerabilities

Products

• Web Panel 15

Newest

• control web panel web panel Control Web Panel (CWP) < 1.29 OS Command Injection via valid_token CVE-2026-104080 8.5 HighNovember 2, 2026
• control web panel web panel Control Web Panel (CWP) < 1.29 Blind SQL Injection via user Parameter CVE-2026-77881 6.8 MediumNovember 2, 2026
• control web panel web panel Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/ CVE-2026-77880 8.5 HighNovember 2, 2026
• control web panel web panel Control Web Panel (CWP) < 1.16 SQL Injection via access_token() API CVE-2026-77879 8.4 HighNovember 2, 2026
• control web panel web panel Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase API CVE-2026-77878 8.5 HighNovember 2, 2026
• control web panel web panel Control Web Panel (CWP) < 1.29 Unauthenticated Loopback API Root Access CVE-2026-77877 8.5 HighNovember 2, 2026
• control web panel web panel Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directory CVE-2026-77876 8.7 HighNovember 2, 2026
• control web panel web panel Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor CVE-2026-73697 8.7 HighNovember 2, 2026
• control web panel web panel Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex CVE-2026-73696 8.6 HighNovember 2, 2026
• control web panel web panel Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.php CVE-2026-73695 8.7 HighNovember 2, 2026
• control web panel web panel Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter CVE-2026-57517 Public exploit 9.3 CriticalJuly 1, 2026
• control web panel web panel, control-webpanel webpanel +1 more Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability CVE-2023-42123 8.8 HighMay 3, 2024
• control web panel web panel, control-webpanel webpanel +1 more Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability CVE-2023-42122 7.8 HighMay 3, 2024
• control web panel web panel, control-webpanel webpanel +1 more Control Web Panel Missing Authentication Remote Code Execution Vulnerability CVE-2023-42121 9.8 CriticalMay 3, 2024
• control web panel web panel, control-webpanel webpanel +1 more Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability CVE-2023-42120 8.8 HighMay 3, 2024