All vulnerabilities

Servers and applications

CVE-2023-42122

Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Control Web Panel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the cwpsrv process, which listens…

Severity
High 7.8
Published
3 May 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Control Web PanelServers and applications · cpe:a:control-webpanel:webpanel
  • Version 0.9.8.1152

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-42122
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-42122