Skip to content

CVE record · 1 source

CVE-2026-77879

CVSS 7.7

Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API authentication gate access_token()…

Vendor: Control Web Panel
Product: Control Web Panel
CVSS v3.1: 7.7 AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness: CWE-89
Exposure class: Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

36

CVE NVD 1h ago

Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API authentication gate access_token()…

Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API authentication gate access_token(), which connects to MySQL as root and interpolates attacker-controlled values…

CVSS 7.7 CVE-2026-77879 Control Web Panel