Search: CVE-2025-48703

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.0	KEVEPSS 99%	CVE-2025-48703 · CWP Control Web Panel OS Command Injection Vulnerability Critical9.0KEVEPSS 99%2025-11-04CISA KEV CWP Control Web Panel has a critical OS command injection vulnerability allowing unauthenticated remote code execution via shell metacharacters in the t_total parameter of a filemanager changePerm request. Exploitation requires knowledge of a valid non-root username. The vulnerability is actively exploited in the wild and has a CVSS score of 9.0. KEVEPSS 99%Vulnerability CWP #exploited-in-the-wild	CISA KEV	2025-11-04

Page 1 of 1 · 1 duplicate CVE record merged