CISA Alerts on Active Exploitation of Critical Web Panel Vulnerabilities
TL;DR Summary
CISA warns of a critical remote command execution vulnerability in CentOS Web Panel (CWP) that is actively exploited, urging federal agencies and organizations to apply security updates by November 25 to mitigate risks. The flaw allows unauthenticated attackers to execute arbitrary commands, impacting all versions before 0.9.8.1204, and was demonstrated on CentOS 7. The vulnerability was reported in May, patched in June, and now added to CISA's Known Exploited Vulnerabilities catalog.
Topics:technology#centos-web-panel#cisa#cve-2025-48703#remote-command-execution#security#vulnerability
- CISA warns of critical CentOS Web Panel bug exploited in attacks BleepingComputer
- CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence The Hacker News
- CISA Warns of CWP Vulnerability Exploited in the Wild SecurityWeek
- CISA Warns of Active Exploitation of Gladinet CentreStack and Triofox Vulnerabilities Cyber Press
- CISA Alerts of Control Web Panel Command Injection Flaw Actively Exploited GBHackers News
Reading Insights
Total Reads
0
Unique Readers
2
Time Saved
2 min
vs 3 min read
Condensed
84%
433 → 71 words
Want the full story? Read the original article
Read on BleepingComputer