{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T21:29:54.052Z",
  "tag": {
    "id": "cwp",
    "label": "CWP",
    "isStack": false,
    "url": "https://pwn.watch/t/cwp",
    "feed": "https://pwn.watch/t/cwp/feed.xml"
  },
  "counts": {
    "incidents": 1,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 1
  },
  "incidents": [
    {
      "slug": "cwp-control-web-panel-cve-2022-44877",
      "title": "CWP Control Web Panel: OS Command Injection (CVE-2022-44877)",
      "url": "https://pwn.watch/i/cwp-control-web-panel-cve-2022-44877",
      "json": "https://pwn.watch/i/cwp-control-web-panel-cve-2022-44877.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "CWP Control Web Panel",
      "tags": [
        "hosting",
        "cwp",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2022-44877"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-01-17",
      "closedAt": "2023-01-17",
      "updatedAt": "2023-01-17",
      "summary": "CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter. Added to CISA KEV on 2023-01-17.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "cwp-control-web-panel-cve-2022-44877",
      "incidentTitle": "CWP Control Web Panel: OS Command Injection (CVE-2022-44877)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-01-17",
      "title": "CISA added CVE-2022-44877 to the KEV catalog (due 2023-02-07).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/cwp-control-web-panel-cve-2022-44877"
    }
  ]
}