Exploited: 178
LatestCVE-2026-95731 — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access
VulnFeed.org
AREN

Control Web Panel Control Web Panel vulnerabilities and fixes

Exploited and high-severity Control Web Panel Control Web Panel vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 8.6CVE-2026-104080Control Web Panel (CWP) < 1.30 OS Command Injection via valid_tokenFix availableControl Web Panel Control Web Panel
    1 min read
  2. 8.6CVE-2026-77880Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/RCEFix availableControl Web Panel Control Web Panel
    1 min read
  3. 8.5CVE-2026-77879Control Web Panel (CWP) < 1.16 SQL Injection via access_token() APIFix availableControl Web Panel Control Web Panel
    1 min read
  4. 8.6CVE-2026-77878Control Web Panel (CWP) < 1.30 OS Command Injection via restoredatabase APIFix availableControl Web Panel Control Web Panel
    1 min read
  5. 8.6CVE-2026-77877Control Web Panel (CWP) < 1.30 Unauthenticated Loopback API Root AccessFix availableControl Web Panel Control Web Panel
    1 min read
  6. 9.3CVE-2026-77876Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directoryRCEFix availableControl Web Panel Control Web Panel
    1 min read
  7. 9.8CVE-2026-73695Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.phpFix availableControl Web Panel Control Web Panel
    1 min read
  8. 9.8CVE-2026-73696Control Web Panel (CWP) < 1.12 Authentication Bypass via Execution After RedirectFix availableControl Web Panel Control Web Panel
    1 min read
  9. 9.8CVE-2026-73697Control Web Panel (CWP) < 1.16 File Write and Command InjectionRCEFix availableControl Web Panel Control Web Panel
    1 min read
Esc