CVE ID :CVE-2026-77879 Published : Nov. 2, 2026, 4:17 p.m. | 46 minutes ago Description :Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API authentication gate access_token(), which connects to MySQL as root and interpolates...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-77879 - Control Web Panel (CWP) < 1.16 SQL Injection via access_token() API

VERWANDTEARTIKEL

CVE-2026-119731 - Munshi Payment Bypass via Unauthenticated Webhook Endpoint

CVE-2026-105604 - Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3

CVE-2026-105603 - Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3

CVE-2026-119085 - Template injection in the publishing component of awslabs Virtual Engineering Workbench

CVE-2026-111048 - FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes

CVE-2026-105769 - kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts