Actively exploited vulnerabilities affecting CWP products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2025-48703https://wildfortech.com/security#CVE-2025-48703CWP Control Web Panel, a widely used web hosting control panel, has a critical flaw allowing attackers with no credentials to execute arbitrary operating system commands remotely. The only prerequisite is knowing a valid non-root username on the system — information often obtainable through other means. Successful exploitation gives an attacker full command execution on the server, putting hosted websites, databases, and the underlying infrastructure at serious risk of compromise or ransomware deployment.Tue, 04 Nov 2025 00:00:00 GMTCWPControl Web Panel