Webpanel
1 CVEs
product
Monthly
CentOS Web Panel (CWP) allows unauthenticated remote code execution through OS command injection in the filemanager changePerm request's t_total parameter.
Command Injection
RCE
Webpanel
NVD
CVSS 3.1
9.0
EPSS
59.1%
CVE-2025-48703
EPSS 59%
CVSS 9.0
CRITICAL
POC
KEV
THREAT
Act Now
CentOS Web Panel (CWP) allows unauthenticated remote code execution through OS command injection in the filemanager changePerm request's t_total parameter.
Command Injection
RCE
Webpanel
NVD