CControl Web Panel

Products

Exploited and recent CVEs

• CVE-2026-104080 High 7.8 Control Web Panel (CWP) < 1.29 OS Command Injection via valid_token 1.2%
• CVE-2026-77881 Medium 5.5 Control Web Panel (CWP) < 1.29 Blind SQL Injection via user Parameter 0.2%
• CVE-2026-77880 High 7.8 Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/ 0.8%
• CVE-2026-77879 High 7.1 Control Web Panel (CWP) < 1.16 SQL Injection via access_token() API 0.2%
• CVE-2026-77878 High 7.8 Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase API 0.8%
• CVE-2026-77877 High 7.8 Control Web Panel (CWP) < 1.29 Unauthenticated Loopback API Root Access 0.2%
• CVE-2026-77876 High 8.8 Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directory 2.3%
• CVE-2026-73697 High 8.8 Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor 1.8%
• CVE-2026-73696 High 8.1 Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex 0.5%
• CVE-2026-73695 High 8.8 Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.php 1.0%
• CVE-2026-57517 Critical 9.8 Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter 1.0%
• CVE-2023-42123 High 8.8 Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability 2.3%
• CVE-2023-42122 High 7.8 Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability 0.8%
• CVE-2023-42121 Critical 9.8 Control Web Panel Missing Authentication Remote Code Execution Vulnerability 1.8%
• CVE-2023-42120 High 8.8 Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability 2.6%