VYPR

phpini_editor user panel module

by Control By Web

CVEs (1)

  • CVE-2026-73697HigNov 2, 2026
    risk 0.57cvss 8.8epss —

    Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection vulnerability in the phpini_editor user panel module that allows attackers with access to the module to write attacker-controlled content to arbitrary paths and execute…