https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T21:00:59.047961+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-73696 CVE-2026-73696 — Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex 2026-11-05T21:00:59.062526+00:00

Affected: Control Web Panel

Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user panel authentication flow (CWPUserIndex) that allows unauthenticated attackers to bypass authentication by exploiting a missing exit() call after a header('Location: ...') redirect. Attackers can send unauthenticated requests to continue PHP execution past the redirect, reaching user panel functionality that should require authentication.