Control Web Panel CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Control Web Panel CVE published 2026-07-01

CVE-2026-57517

CVE-2026-57517 is a critical vulnerability in Control Web Panel before version 0.9.8.1225. The vulnerability is a blind SQL injection issue that allows unauthenticated remote attackers to execute arbitrary SQL queries. This can lead to remote code execution as the cwpsvc account by exploiting MySQL root privileges obtained via the injection. The vulnerability is highly severe with a CVSS score of 9.3.