CVE-2026-124020

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 14, 2026

Last Seen

November 14, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical CVE-2026 Flaws in Control Web Panel Lead to Account Takeover Risks79.5

Control Web Panel (CWP) versions prior to 1.30.6 are affected by two critical vulnerabilities, CVE-2026-124020 and CVE-2026-124021, both disclosed on 2026-11-13. CVE-2026-124020 allows attackers to exploit a host header injection in the password recovery process, potentially leading to account takeo...