What’s Vulnerable › Products

CentOS Web Panel vulnerabilities

86 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your CentOS Web Panel version is affected

Exploited CentOS Web Panel vulnerabilities

• CVE-2025-48703 — CWP Control Web Panel OS Command Injection Vulnerability
• CVE-2022-44877 — CWP Control Web Panel OS Command Injection Vulnerability

Latest CentOS Web Panel vulnerabilities

• CVE-2026-57517 — Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter (CVSS 9.8)
• CVE-2025-48703 — CWP Control Web Panel OS Command Injection Vulnerability (CVSS 9.0) — exploited
• CVE-2023-42123 — Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2023-42122 — Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability (CVSS 7.8)
• CVE-2023-42121 — Control Web Panel Missing Authentication Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2023-42120 — Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2022-44877 — CWP Control Web Panel OS Command Injection Vulnerability (CVSS 9.8) — exploited
• CVE-2021-45467 — (CVSS 9.8)
• CVE-2021-45466 — (CVSS 9.8)
• CVE-2022-25048 — (CVSS 8.8)
• CVE-2022-25047 — (CVSS 5.9)
• CVE-2022-25046 — (CVSS 9.8)
• CVE-2021-31324 — (CVSS 9.8)
• CVE-2021-31316 — (CVSS 9.8)
• CVE-2020-15628 — (CVSS 7.5)
• CVE-2020-15627 — (CVSS 7.5)
• CVE-2020-15626 — (CVSS 7.5)
• CVE-2020-15625 — (CVSS 7.5)
• CVE-2020-15624 — (CVSS 7.5)
• CVE-2020-15623 — (CVSS 9.8)
• CVE-2020-15622 — (CVSS 7.5)
• CVE-2020-15621 — (CVSS 7.5)
• CVE-2020-15620 — (CVSS 7.5)
• CVE-2020-15619 — (CVSS 7.5)
• CVE-2020-15618 — (CVSS 7.5)