CVE WATCH / VULNERABILITY DETAIL
CVE-2026-73697
HIGHCVSS 8.8NVD feed
Published 2 November 2026 · tracked since 3 November 2026
Description
Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection vulnerability in the phpini_editor user panel module that allows attackers with access to the module to write attacker-controlled content to arbitrary paths and execute arbitrary OS command
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-119736 HIGH 8.2
- CVE-2026-120057 HIGH 7.5
- CVE-2026-120058 HIGH 7.5
- CVE-2026-105603
- CVE-2026-105604
- CVE-2026-119301 HIGH 7.9
- CVE-2026-105769 CRITICAL 9.3
- CVE-2026-99242
- CVE-2026-99236 HIGH 7.8
- CVE-2026-99237 HIGH 7.8