VYPR

protected_directory

by Control By Web

CVEs (1)

  • CVE-2026-77876CriNov 2, 2026
    risk 0.64cvss 9.8epss —

    Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the protected_directory user panel module that allows attackers to execute arbitrary commands by submitting unescaped input through the file POST parameter in the acc=deletedp…