importantSYS.SOURCE: The Hacker News• 2026-11-06T11:28:54+05:30

Linux Backdoor Discovered in Control Web Panel Server for Unlogged Command Execution

#linux #backdoor #security vulnerability

Researchers at QiAnXin's XLab discovered a backdoor in the Control Web Panel (CWP) web server, enabling attackers to execute commands via web requests without logging them. The exploit requires prior root access, indicating a targeted attack vector.

A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin's XLab said this week.

The backdoored web server executes commands that attackers send via web requests, and those requests never appear in its access logs. Installing it takes root access, so the attackers must already control the server.

Read original article

*** END OF TRANSMISSION ***

> APPLE REPORTS OVER 100,000 APPS OPTIMIZED FOR IPHONE DUO > AI-DRIVEN ACCELERATION IN AI RESEARCH AND ITS IMPLICATIONS > HYBRID LLM MODEL COMBINING JEV AND OPUS ACHIEVES 4X COST REDUCTION IN IDENTITY RESOLUTION > AI AGENTS AUTOMATE LEGO MECHANISM ANIMATION FROM LDRAW MODELS > JAPANESE RURAL DEPOPULATION LINKED TO BIODIVERSITY LOSS > EXPLOITING FIRECRACKER MICROVMS FOR GUEST-TO-HOST CODE EXECUTION VIA KERNEL MANIPULATION > REBECCA WEST'S TELEGRAM: A PERSONAL REFLECTION > SOPHISTICATED RESTAURANT DELIVERY PAYMENT-SKIMMING OPERATION UNCOVERED > REPLIT'S MICROVM-BASED SANDBOX ENGINE ENHANCES SECURITY AND SCALABILITY > HUNDREDS OF ARTEX AI HACKING TOOLS EXPOSED ONLINE, POSE CYBERSECURITY RISKS> APPLE REPORTS OVER 100,000 APPS OPTIMIZED FOR IPHONE DUO > AI-DRIVEN ACCELERATION IN AI RESEARCH AND ITS IMPLICATIONS > HYBRID LLM MODEL COMBINING JEV AND OPUS ACHIEVES 4X COST REDUCTION IN IDENTITY RESOLUTION > AI AGENTS AUTOMATE LEGO MECHANISM ANIMATION FROM LDRAW MODELS > JAPANESE RURAL DEPOPULATION LINKED TO BIODIVERSITY LOSS > EXPLOITING FIRECRACKER MICROVMS FOR GUEST-TO-HOST CODE EXECUTION VIA KERNEL MANIPULATION > REBECCA WEST'S TELEGRAM: A PERSONAL REFLECTION > SOPHISTICATED RESTAURANT DELIVERY PAYMENT-SKIMMING OPERATION UNCOVERED > REPLIT'S MICROVM-BASED SANDBOX ENGINE ENHANCES SECURITY AND SCALABILITY > HUNDREDS OF ARTEX AI HACKING TOOLS EXPOSED ONLINE, POSE CYBERSECURITY RISKS