Skip to content
OpenAdvisories

Vendor

Control Web Panel

15 known vulnerabilities.

Products

Control Web Panel 15
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-77881

    Control Web Panel (CWP) < 1.29 Blind SQL Injection via user Parameter

    Control Web Panel (CWP) before webpanel_version 1.29 contains a blind SQL injection vulnerability in an unauthenticated loopback API route that connects to MySQL as root, where the 'user' parameter is interpolated directly into a query against the oauth_clien…

    Control Web Panel Control Web Panel