CVE-2026-73697

Control Web Panel CWP before webpanelversion 1.16 contains an arbitrary file write and OS command injection vulnerability in the phpinieditor user panel module that allows attackers with access to the module to write attacker-controlled content to arbitrary paths and execute arbitrary OS commands...

EUVD-2026-115229

Control Web Panel CWP before webpanelversion 1.16 contains an arbitrary file write and OS command injection vulnerability in the phpinieditor user panel module that allows attackers with access to the module to write attacker-controlled content to arbitrary paths and execute arbitrary OS commands...

CVE-2026-73697 Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor

Control Web Panel CWP before webpanelversion 1.16 contains an arbitrary file write and OS command injection vulnerability in the phpinieditor user panel module that allows attackers with access to the module to write attacker-controlled content to arbitrary paths and execute arbitrary OS commands...

CVE-2026-73697: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection…

Control Web Panel CWP before webpanelversion 1.16 contains an arbitrary file write and OS command injection vulnerability in the phpinieditor user panel module that allows attackers with access to the module to write attacker-controlled content to arbitrary paths and execute arbitrary OS commands...

PT-2026-135485

Control Web Panel CWP before webpanel version 1.16 contains an arbitrary file write and OS command injection vulnerability in the phpini editor user panel module that allows attackers with access to the module to write attacker-controlled content to arbitrary paths and execute arbitrary OS...