https://pwn.watch/t/cwp Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Tue, 17 Jan 2023 00:00:00 GMT https://pwn.watch/i/cwp-control-web-panel-cve-2022-44877 https://pwn.watch/i/cwp-control-web-panel-cve-2022-44877 Tue, 17 Jan 2023 00:00:00 GMT critical <p>CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter. Added to CISA KEV on 2023-01-17.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2023-01-17: CISA added CVE-2022-44877 to the KEV catalog (due 2023-02-07).</li></ul> <p><strong>CVEs:</strong> CVE-2022-44877</p>