New that day
- highpatchedexploited CWP Control Web Panel OS Command Injection Vulnerability CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command Injection vulnerability that allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known. Added to CISA KEV on 2025-11-04 (federal deadline 2025-11-25).
- highpatchedexploited Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files. Added to CISA KEV on 2025-11-04 (federal deadline 2025-11-25).