CVE-2026-124020 | Control Web Panel up to 1.30.5 Token Generation /v1/lostpass injection

November 14, 2026 Yanac

A vulnerability described as critical has been identified in Control Web Panel up to 1.30.5. The affected element is an unknown function of the file /v1/lostpass of the component Token Generation. Executing a manipulation can lead to injection.

The identification of this vulnerability is CVE-2026-124020. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More