Control Web Panel vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 202611

Newest CVEs

• CVE-2026-104080

  Control Web Panel (CWP) < 1.29 OS Command Injection via valid_token

  Control Web Panel · Control Web Panel

  High8.5
• CVE-2026-77881

  Control Web Panel (CWP) < 1.29 Blind SQL Injection via user Parameter

  Control Web Panel · Control Web Panel

  Medium6.8
• CVE-2026-77880

  Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/

  Control Web Panel · Control Web Panel

  High8.5
• CVE-2026-77879

  Control Web Panel (CWP) < 1.16 SQL Injection via access_token() API

  Control Web Panel · Control Web Panel

  High8.4
• CVE-2026-77878

  Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase API

  Control Web Panel · Control Web Panel

  High8.5
• CVE-2026-77877

  Control Web Panel (CWP) < 1.29 Unauthenticated Loopback API Root Access

  Control Web Panel · Control Web Panel

  High8.5
• CVE-2026-77876

  Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directory

  Control Web Panel · Control Web Panel

  High8.7
• CVE-2026-73697

  Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor

  Control Web Panel · Control Web Panel

  High8.7
• CVE-2026-73696

  Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex

  Control Web Panel · Control Web Panel

  High8.6
• CVE-2026-73695

  Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.php

  Control Web Panel · Control Web Panel

  High8.7