VYPR
Get started
← All advisories
Unrated severityCISA KEVNVD Advisory· Published Sep 19, 2025· Updated Feb 26, 2026

CVE-2025-48703

CVE-2025-48703

Description

CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.

Affected products

1
  • centos-webpanel/CentOS Web Panelv5
    Range: 0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

3