CVE-2026-77877 | Control Web Panel up to 1.29 Loopback API Service missing authentication

November 2, 2026 Yanac

A vulnerability was found in Control Web Panel up to 1.29 and classified as critical. This affects an unknown function of the component Loopback API Service. The manipulation results in missing authentication.

This vulnerability was named CVE-2026-77877. The attack needs to be approached locally. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More