CVE-2026-73696 Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex

Control Web Panel CWP before webpanelversion 1.12 contains an execution after redirect vulnerability in the user panel authentication flow CWPUserIndex that allows unauthenticated attackers to bypass authentication by exploiting a missing exit call after a header'Location: ...' redirect. Attacker...

PT-2026-135484

Control Web Panel CWP before webpanel version 1.12 contains an execution after redirect vulnerability in the user panel authentication flow CWPUserIndex that allows unauthenticated attackers to bypass authentication by exploiting a missing exit call after a header'Location: ...' redirect. Attacke...

CVE-2026-73696: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user…

Control Web Panel CWP before webpanelversion 1.12 contains an execution after redirect vulnerability in the user panel authentication flow CWPUserIndex that allows unauthenticated attackers to bypass authentication by exploiting a missing exit call after a header'Location: ...' redirect. Attacker...