A Vulnerability in CWP (aka Control Web Panel or CentOS Web Panel) Could Allow for Remote Code Execution

A remote code execution vulnerability has been discovered in Control Web Panel (CWP) that can allow authentication bypass and command injection via its web administration/user interfaces (commonly on ports 2087, 2031, and 2083). Successful exploitation could grant attackers administrative control of affected servers; the report explains the affected components and impact but provides no indicators of active exploitation or detailed exploit mechanics.