CVE-2026-77880 | Control Web Panel up to 1.15 Loopback API user os command injection

November 2, 2026 Yanac

A vulnerability classified as critical has been found in Control Web Panel up to 1.15. This vulnerability affects unknown code of the component Loopback API. This manipulation of the argument User causes os command injection.

This vulnerability appears as CVE-2026-77880. The attack requires local access. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More