CVE-2026-124021

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

November 13, 2026

Last Seen

November 14, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical CVE-2026 Flaws in Control Web Panel Lead to Account Takeover Risks79.5

Control Web Panel (CWP) versions prior to 1.30.6 are affected by two critical vulnerabilities, CVE-2026-124020 and CVE-2026-124021, both disclosed on 2026-11-13. CVE-2026-124020 allows attackers to exploit a host header injection in the password recovery process, potentially leading to account takeo...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical CVE-2026 Flaws in Control Web Panel Lead to Account Takeover Risks

9h ago·5 sources

Related Articles (3)

CVE Alert: CVE-2026-124021 – Control Web Panel

Redpacketsecurity·4h ago

Exploit for CVE-2026

Sploitus·9h ago

CVE-2026-124021 Control Web Panel < 1.30.6 Authorization Bypass via oauth_authorization_codes exploit

Sploitus·1d ago

Related Entities

Zero-day Exploit Data Breach CWE-287 - Improper Authentication CWE-200 - Exposure of Sensitive Information CWE-640 - Weak Password Recovery Mechanism for Forgotten Password CWE-863 - Incorrect Authorization T1053 - Scheduled Task/Job T1059 - Command and Scripting Interpreter T1505.003 - Web Shell T1003 - OS Credential Dumping