Jun
15th
15th
Control Web Panel (CWP) RCE Vulnerability
CVE-2025-67888 Overview CVE-2025-67888 is an unauthenticated OS command injection vulnerability in Control Web Panel (CWP) versions before 0.9.8.1209. The flaw resides in /admin/index.php, where the key GET parameter is not sanitized before being passed to OS command execution when the api parameter is set. Attackers can inject arbitrary shell ... Read More »
