CVE-2025-70951Disclosure

LOW

Exploit discussion active in current signal (6 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

Back to dashboard

1.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

Public PoC is present in monitored signal
6 mentions across 1 observed day

What's happening

PoC mentioned or linked in 2 signals
Technical details provided in 6 signals
Disclosure: 4 classified signals
General: 1 classified signal
6 total mentions across 1 day

Deep dive

Activity timeline6 mentions / 1d

Signal classification3 categories

Disclosure

466.7%

General

116.7%

PoC

116.7%

Referenced assets1 URL

By indicator

https://fenrisk.com/rce-centos-webpanel-2

Full discourse6 posts

Nicolas Krassas@Dinosn188d
Disclosure
New RCE in Control Web Panel (CVE-2025-70951) https://fenrisk.com/rce-centos-webpanel-2
Post summary
The tweet announces a newly discovered remote code execution vulnerability (CVE-2025-70951) in Control Web Panel, providing a link for more details but no information on PoC, exploitation, or patch availability.
0902993.2K
157.2K followersView on X
/r/netsec@_r_netsec188d
Disclosure
New RCE in Control Web Panel (CVE-2025-70951) https://fenrisk.com/rce-centos-webpanel-2
Post summary
A new Remote Code Execution vulnerability, CVE-2025-70951, has been disclosed for Control Web Panel, with a link that likely contains further details.
05053986
33.3K followersView on X
Fenrisk@FenriskSec188d
General
Another year but similar vulnerabilities. New blogpost for a new vulnerability in a newly renamed product. New RCE in Control Web Panel (CWP)! Go find out and read every details about CVE-2025-70951 in our blogpost: https://fenrisk.com/rce-centos-webpanel-2 #RCE #CWP
Post summary
The post announces a new remote code execution vulnerability (CVE-2025-70951) in Control Web Panel, directing readers to a blog post but offering no PoC, exploit details, or patch information.
02032132
121 followersView on X
Vivek | Cybersecurity@VivekIntel188d
Disclosure
CVE-2025-70951 in CentOS Web Panel enables unauthenticated command execution by combining an authentication bypass with command injection in the addons module. An attacker with a valid username can send crafted requests to execute arbitrary commands, highlighting continued risk in exposed hosting control panels. https://fenrisk.com/rce-centos-webpanel-2
Post summary
CVE-2025-70951 lets attackers achieve unauthenticated command execution by exploiting an authentication bypass and command injection within CentOS Web Panel's addons module; the post contains technical details but no PoC, exploit code, or patch information.
00000338
2.1K followersView on X
💻🥷 WarthogTK 🩺 🇺🇦🇪🇺✈️@warthogtk188d
Disclosure
Remote code execution in CentOS Web Panel - CVE-2025-70951 https://fenrisk.com/rce-centos-webpanel-2
Post summary
The message announces CVE-2025-70951, a remote code execution vulnerability affecting CentOS Web Panel, and links to a source likely containing further details.
00000320
1.7K followersView on X
Security Harvester@secharvesterx188d
PoC
New RCE in Control Web Panel (CVE-2025-70951) https://fenrisk.com/rce-centos-webpanel-2 https://t.co/0wb4i5qekH
Post summary
A new remote code execution vulnerability (CVE‑2025‑70951) has been disclosed with a linked PoC, but no exploit tool, patch, or evidence of active exploitation is provided.
00000283
905 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2025-70951

Nicolas Krassas[verified]@DinosnDisclosure

The tweet announces a newly discovered remote code execution vulnerability (CVE-2025-70951) in Control Web Panel, providing a link for more details but no information on PoC, exploitation, or patch availability.

Vivek | Cybersecurity[verified]@VivekIntelDisclosure

CVE-2025-70951 lets attackers achieve unauthenticated command execution by exploiting an authentication bypass and command injection within CentOS Web Panel's addons module; the post contains technical details but no PoC, exploit code, or patch information.

/r/netsec@_r_netsecDisclosure

A new Remote Code Execution vulnerability, CVE-2025-70951, has been disclosed for Control Web Panel, with a link that likely contains further details.

Fenrisk@FenriskSecGeneral

The post announces a new remote code execution vulnerability (CVE-2025-70951) in Control Web Panel, directing readers to a blog post but offering no PoC, exploit details, or patch information.

💻🥷 WarthogTK 🩺 🇺🇦🇪🇺✈️@warthogtkDisclosure

The message announces CVE-2025-70951, a remote code execution vulnerability affecting CentOS Web Panel, and links to a source likely containing further details.

Security Harvester@secharvesterxPoC

A new remote code execution vulnerability (CVE‑2025‑70951) has been disclosed with a linked PoC, but no exploit tool, patch, or evidence of active exploitation is provided.