CVE WATCH / VULNERABILITY DETAIL
CVE-2026-73696
CRITICALCVSS 9.1NVD feed
Published 2 November 2026 · tracked since 3 November 2026
Description
Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user panel authentication flow (CWPUserIndex) that allows unauthenticated attackers to bypass authentication by exploiting a missing exit() call after a header('Location: ...') redirect. At
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-119736 HIGH 8.2
- CVE-2026-120057 HIGH 7.5
- CVE-2026-120058 HIGH 7.5
- CVE-2026-105603
- CVE-2026-105604
- CVE-2026-119301 HIGH 7.9
- CVE-2026-105769 CRITICAL 9.3
- CVE-2026-99242
- CVE-2026-99236 HIGH 7.8
- CVE-2026-99237 HIGH 7.8