CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-09-19
Control Web Panel (CWP) Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2025-48703)
[Affected Scope] Control Web Panel (CWP, formerly CentOS Web Panel) versions prior to 0.9.8.1205
[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) on the target server by injecting shell metacharacters into the 't_total' parameter of a 'changePerm' request, provided a valid non-root username is known
[Mitigation] Immediately upgrade CWP to version 0.9.8.1205 or higher, and restrict access to the CWP management ports using firewall rules