CVE-2026-77879 | Control Web Panel up to 1.15 Loopback API Authentication Gate access_token authorization_code/client_id sql injection

A vulnerability labeled as critical has been found in Control Web Panel up to 1.15. This vulnerability affects the function access_token of the component Loopback API Authentication Gate. The manipulation of the argument authorization_code/client_id results in sql injection.

This vulnerability is cataloged as CVE-2026-77879. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More