EUVD-2026-115244

Control Web Panel CWP before webpanelversion 1.30 contains a missing authentication vulnerability that allows attackers able to reach the loopback API service to invoke root-privileged API routes without presenting an access token. Attackers can access endpoints such as /v1/restoredatabase/,...

CVE-2026-77877: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30 contains a missing authentication vulnerability that allows…

Control Web Panel CWP before webpanelversion 1.30 contains a missing authentication vulnerability that allows attackers able to reach the loopback API service to invoke root-privileged API routes without presenting an access token. Attackers can access endpoints such as /v1/restoredatabase/,...

PT-2026-135492

Control Web Panel CWP before webpanel version 1.30 contains a missing authentication vulnerability that allows attackers able to reach the loopback API service to invoke root-privileged API routes without presenting an access token. Attackers can access endpoints such as /v1/restoredatabase/,...