CVE-2026-77880 - Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/
CVE ID :CVE-2026-77880 Published : Nov. 2, 2026, 4:17 p.m. | 46 minutes ago Description :Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the loopback API password change route /newpass/, which runs as root. An attacker can inject...