CVE-2019-13599: Control-Webpanel Webpanel

Medium severity, CVSS 5.3. EPSS: 4% chance of exploitation in the next 30 days.

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.848, the Login process allows attackers to check whether a username is valid by comparing response times.

Affected products

Published 2019-08-21. Last modified 2026-06-17.