CVE Watch—

CVE-2022-44877

CWP Control Web Panel OS Command Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

100.0%

p100

KEV

SIM

17 de jan. de 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 dias100.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

CWP / Control Web Panel

Vulnerabilidade

CWP Control Web Panel OS Command Injection Vulnerability

Adicionado ao KEV

17 de jan. de 2023

Corrigir até

7 de fev. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter.

Ação necessária

Apply updates per vendor instructions.

Notas

https://control-webpanel.com/changelog#1669855527714-450fb335-6194; https://nvd.nist.gov/vuln/detail/CVE-2022-44877

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-48703—

99.9%

KEV—80CWP Control Web Panel OS Command Injection Vulnerability—