Threats tagged 'ghsa-hcj5-rpjg-pm72'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.5	CVE-2026-77879Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API High8.52026-11-02GCVE DatabaseCVE-2026-77879 Control Web Panel (CWP) versions before 1.16 have a SQL injection vulnerability in the loopback API authentication gate access_token(). This flaw allows attackers to inject SQL via the authorization_code and client_id parameters, enabling them to read arbitrary database contents and bypass authentication checks. Report on CVE-2026-77879 Vulnerability CWE-89 #ghsa-hcj5-rpjg-pm72	GCVE Database	2026-11-02

Page 1 of 1