Skip to content
OpenAdvisories

Vendor

Control Web Panel

15 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-57517 Public exploit

    Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter

    Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL queries by submitting unsanitized input through the userRes POST parameter at the user endpoint. Attackers c…