CVE-2026-77881 | Control Web Panel up to 1.29 Loopback API user sql injection

November 2, 2026 Yanac

A vulnerability was found in Control Web Panel up to 1.29. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the component Loopback API. Performing a manipulation of the argument User results in sql injection.

This vulnerability is identified as CVE-2026-77881. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More