Exploited Control Web Panel Flaw Added to CISA 'Must-Patch' List

The bug is described as an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter. The vulnerability has a CVSS score of 9.8/10 and is considered trivial to exploit.