CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Control Web Panel (CWP) Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2025-48703)
[Affected Scope] Control Web Panel (CWP, formerly CentOS Web Panel) versions prior to 0.9.8.1205
[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) on the target server by injecting shell metacharacters into the 't_total' parameter of a 'changePerm' request, provided a valid non-root username is known
[Mitigation] Immediately upgrade CWP to version 0.9.8.1205 or higher, and restrict access to the CWP management ports using firewall rules
CentOS Web Panel (CWP) 7 login/index.php Remote Code Execution (RCE) Vulnerability (CVE-2022-44877) Analysis and Mitigation Guide
[Affected Scope] CentOS Web Panel (CWP) 7 versions prior to 0.9.8.1147
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges on the target server by injecting shell metacharacters into the login parameter.
[Mitigation] Immediately upgrade CWP 7 to version 0.9.8.1147 or later, and restrict access to the management ports using firewalls.