Control Web Panel Authorization Bypass Via Oauth Authorization Codes

Back www.vulncheck.com

Control Web Panel Authorization Bypass Via Oauth Authorization Codes

www.vulncheck.com • November 14, 2026

Share: View original

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Control Web Panel Vulnerabilities Expose Users to Attacks Two vulnerabilities have been identified in Control Web Panel (CWP), affecting multiple versions. The first, a host header password reset poisoning flaw, allows attackers to reset user passwords without authorization. The second, an authorization bypass via OAuth authorization codes, enables unauthorized access to user accounts. Both vulnerabilities impact CWP versions prior to the latest patch. As of today, no has been confirmed, but the vulnerabilities are considered serious. Security professionals are advised to prioritize patching to mitigate potential risks. Specific CVEs have not been disclosed in the articles, but the vulnerabilities are significant enough to warrant immediate attention. 61

Extracted Entities

CWE Weaknesses (1)

CWE-287 - Improper Authentication

Vulnerabilities (1)

Control Web Panel Authorization Bypass Via Oauth Authorization Codes