Backdoor Hidden in Control Web Panel Server Runs Commands Without Logging
MALWAREControl Web Panelredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
QiAnXin's XLab has reported a backdoor embedded in the web server component of Control Web Panel (CWP), a free Linux hosting management panel. It executes commands sent via web requests that do not appear in access logs, which hampers detection through standard web log review. Installation requires root, so the backdoor indicates a prior full compromise rather than an initial access vector. The article gives no CVE IDs, affected versions or patch details.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Review servers running Control Web Panel for signs of a root compromise, since installing the backdoor requires root access.
- Do not rely on web access logs alone to rule out this backdoor, because its requests do not appear in them.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News
Who and what is in it
Products