CyberSecBulletin

Centos-webpanel vulnerabilities

We track 1 vulnerability in Centos-webpanel products. 1 is rated high or critical, and 1 has been exploited in real attacks. The most recent was published on September 19, 2025.

1vulnerabilities
1critical
0high
1exploited
9.0average CVSS score

Latest Centos-webpanel vulnerabilities

  • 9.0 Critical severity

    CWP Control Web Panel OS Command Injection Exploited

    CVE-2025-48703Centos-webpanelEPSS 99.7%

    CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.