Threats tagged 'ghsa-79c3-cwrw-p52v'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.6	CVE-2026-104080Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback High8.62026-11-02GCVE DatabaseCVE-2026-104080 Control Web Panel (CWP) versions before 1.30 have an OS command injection vulnerability in the /valid_token/ API route. This flaw allows unauthenticated attackers to execute arbitrary commands as root by injecting shell metacharacters into the 'user' parameter, which is passed unescaped to a shell_exec() call. Report on CVE-2026-104080 Vulnerability CWE-78 #ghsa-79c3-cwrw-p52v	GCVE Database	2026-11-02

Page 1 of 1