CVE WATCH / VULNERABILITY DETAIL
CVE-2026-73695
HIGHCVSS 8.8NVD feed
Published 2 November 2026 · tracked since 3 November 2026
Description
Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users/index.php that allows attackers to include arbitrary local PHP files by supplying an unsanitized module name parameter concatenated directly into an include path. Attackers can inject direc
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-119736 HIGH 8.2
- CVE-2026-120057 HIGH 7.5
- CVE-2026-120058 HIGH 7.5
- CVE-2026-105603
- CVE-2026-105604
- CVE-2026-119301 HIGH 7.9
- CVE-2026-105769 CRITICAL 9.3
- CVE-2026-99242
- CVE-2026-99236 HIGH 7.8
- CVE-2026-99237 HIGH 7.8