https://pwn.watch/i/cwp-control-web-panel-cve-2025-48703 CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command Injection vulnerability that allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known. Added to CISA KEV on 2025-11-04. en Tue, 04 Nov 2025 00:00:00 GMT https://pwn.watch/i/cwp-control-web-panel-cve-2025-48703 https://pwn.watch/i/cwp-control-web-panel-cve-2025-48703#2025-11-04-274b8b99 Tue, 04 Nov 2025 00:00:00 GMT critical <p>CWP Control Web Panel: Control Web Panel OS Command Injection Vulnerability: CISA added CVE-2025-48703 to the KEV catalog (due 2025-11-25).</p>