Skip to content
OpenAdvisories

Vendor

Control Web Panel

15 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-57517 Public exploit

    Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter

    Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL queries by submitting unsanitized input through the userRes POST parameter at the user endpoint. Attackers c…

  • Critical 9.8

    Control Web Panel Missing Authentication Remote Code Execution Vulnerability

    Control Web Panel Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is not required to exploit this vulnerability. Th…