{"vulnerability": "CVE-2026-57517", "sightings": [{"uuid": "2da9331d-e6c6-4851-b6fd-0952efb4c84b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplxqjsfol2i", "content": "CVE-2026-57517 - Control Web Panel\nCVE ID : CVE-2026-57517\n \n Published : July 1, 2026, 3:11 p.m. | 35\u00a0minutes ago\n \n Description : Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrar...", "creation_timestamp": "2026-07-01T16:45:58.270885Z"}, {"uuid": "2995cfdd-1536-47ae-b84a-eebb2038f53f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmyyilm2p2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-57517 \u0432 Control Web Panel: \u0443\u0433\u0440\u043e\u0437\u0430 \u0441\u043b\u0435\u043f\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/7EDACBB2-AB1D-47A5-A35D-646EC6B1B3B6", "creation_timestamp": "2026-07-02T02:40:58.876153Z"}, {"uuid": "3ce8d94f-a2a8-49cb-980d-6283cb009c73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn76byov32l", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-57517 \u0432 Control Web Panel: \u0443\u0433\u0440\u043e\u0437\u0430 \u0441\u043b\u0435\u043f\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/61C84023-092C-41B3-B1D5-591165B52FD2", "creation_timestamp": "2026-07-02T04:31:36.079148Z"}, {"uuid": "ad245c76-03f5-471b-8d5a-437f174b6717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mppn7mcw2t2f", "content": "A public PoC is available for CVE-2026-57517, a critical CVSS 9.8 Control Web Panel SQLi flaw allowing unauthenticated remote code execution.\n\n#CVE202657517 #ControlWebPanel #SQLInjection #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-03T03:48:12.503764Z"}, {"uuid": "ba9b0414-7688-4412-93e0-66b02a1cdac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqin55bdd2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-57517 \u0432 Control Web Panel: \u0443\u0433\u0440\u043e\u0437\u0430 \u0441\u043b\u0435\u043f\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/9A4B347C-43E3-41DF-8764-029E509599B8", "creation_timestamp": "2026-07-03T11:58:56.721988Z"}, {"uuid": "2badb0a1-f5e2-4c2f-89a4-905471fc618f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mpte3diswa2v", "content": "\ud83d\udd34 EXPLOITED\n\nControl Web Panel, a hosting panel on many budget Linux servers, has a critical flaw (CVE-2026-57517) that lets a stranger take over the server with no login.\n\nA working exploit went public July 4.\n\nFix: update to 0.9.8.1225 now.", "creation_timestamp": "2026-07-04T15:15:23.953518Z"}, {"uuid": "361e743d-a2f4-4a9a-8283-db1f0426dea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-57517", "type": "seen", "source": "https://infosec.exchange/ap/users/116769913619325742/statuses/116862361729840802", "content": "\ud83d\udd34 EXPLOITED\nControl Web Panel, a hosting panel on many budget Linux servers, has a critical flaw (CVE-2026-57517) that lets a stranger take over the server with no login.\nA working exploit went public July 4.\nFix: update to 0.9.8.1225 now.\nhttps://suriq.io/blog/control-web-panel-cve-2026-57517-public-exploit\n#CVE #infosec #cybersecurity", "creation_timestamp": "2026-07-04T19:14:28.718235Z"}, {"uuid": "ebc5b2a1-f1e5-44de-9231-27ef4db58aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mq6hu3c4gq2r", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-57517) Control Web Panel Remote Code Execution via SQL Injection\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-07-09T01:22:12.359248Z"}, {"uuid": "b0449f52-1093-4ebd-9663-dd78b35eb5dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://t.me/GithubRedTeam/92710", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57517-CWP\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 17:00:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nControl Web Panel (CWP) vulnerability scenario related to CVE-2026-57517\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.109023Z"}, {"uuid": "3d0dba73-8ad4-4e9f-ba11-992990574457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://t.me/GithubRedTeam/91911", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57517\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 14:48:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\udc89 Blind SQL Injection \u2192 RCE exploit for Control Web Panel (CWP) \u2264 0.9.8.1224 \u2014 userRes POST \u2192 INTO DUMPFILE \u2192 cwpsvc shell\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:13.029429Z"}, {"uuid": "aaf33587-849a-43a3-8721-bdc6a11a57e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://t.me/GithubRedTeam/92710", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57517-CWP\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 17:00:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nControl Web Panel (CWP) vulnerability scenario related to CVE-2026-57517\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:09.571848Z"}, {"uuid": "2bbf7709-1026-4db1-a8c1-3359dae4af41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://t.me/GithubRedTeam/91911", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57517\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 14:48:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\udc89 Blind SQL Injection \u2192 RCE exploit for Control Web Panel (CWP) \u2264 0.9.8.1224 \u2014 userRes POST \u2192 INTO DUMPFILE \u2192 cwpsvc shell\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:21.004849Z"}, {"uuid": "e6ea7283-b1d8-4f87-b7a0-2f7f630346fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91911", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57517\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 14:48:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\udc89 Blind SQL Injection \u2192 RCE exploit for Control Web Panel (CWP) \u2264 0.9.8.1224 \u2014 userRes POST \u2192 INTO DUMPFILE \u2192 cwpsvc shell\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.208570Z"}, {"uuid": "528a11e6-46cb-4c49-aac0-bdd8127fb19c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92710", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57517-CWP\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 17:00:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nControl Web Panel (CWP) vulnerability scenario related to CVE-2026-57517\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:36.471792Z"}, {"uuid": "197ed782-ff8c-4cdb-bbc4-7ba309caa042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "Telegram/QKon8ALdayI3TrgWGw4-0pv35mdNAYiB_OEF40OlB_Dw96c", "content": "", "creation_timestamp": "2026-07-16T19:00:15.395397Z"}, {"uuid": "fa7bb5c8-3aae-4653-a5f2-52426cab904f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-16T19:00:22.369112Z"}, {"uuid": "1c60c5ed-f901-4312-9484-a0ea577a76ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "Telegram/9Hb4fvIPrKK8606iJIWyf5bhKwWTbv2xyC9a2GDzZG3YJM8", "content": "", "creation_timestamp": "2026-07-16T19:00:22.141414Z"}, {"uuid": "dfe81331-5ff6-4a02-a09a-d4893466db6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "Telegram/9Hb4fvIPrKK8606iJIWyf5bhKwWTbv2xyC9a2GDzZG3YJM8", "content": "", "creation_timestamp": "2026-07-17T00:00:38.614579Z"}, {"uuid": "3cecfa81-476f-4be3-8362-39ea6ab1be27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-17T00:00:38.856316Z"}, {"uuid": "57bc7bb6-29e1-4170-af91-1a98ff05b27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "Telegram/QKon8ALdayI3TrgWGw4-0pv35mdNAYiB_OEF40OlB_Dw96c", "content": "", "creation_timestamp": "2026-07-17T01:00:13.452729Z"}, {"uuid": "24082e38-79a9-4632-b020-a0246fb6702f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "published-proof-of-concept", "source": "Telegram/9Hb4fvIPrKK8606iJIWyf5bhKwWTbv2xyC9a2GDzZG3YJM8", "content": "", "creation_timestamp": "2026-07-18T00:00:21.994586Z"}, {"uuid": "4b37bc36-3c8c-4568-8e5e-87ce044e48c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "published-proof-of-concept", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-18T00:00:22.131395Z"}, {"uuid": "a5282cbd-fe94-497c-a75e-4d230f1f4747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "published-proof-of-concept", "source": "Telegram/QKon8ALdayI3TrgWGw4-0pv35mdNAYiB_OEF40OlB_Dw96c", "content": "", "creation_timestamp": "2026-07-18T00:00:42.101735Z"}]}