CVE-2026-73696

Control Web Panel (CWP) versions prior to webpanel_version 1.12 are vulnerable to an execution after redirect (EAR) vulnerability within the CWPUserIndex authentication flow. The root cause is a missing exit() call following a header('Location: ...') redirect, which allows unauthenticated attacke...