CWE-698 · Input Validation and Logic
Execution After Redirect (EAR)
22CVEs
SortMost likely exploited
22 CVEs with CWE-698 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-48766CheckNetAlert X - Arbitary File ReadNetAlertX · NetAlertX · CVSS 8.6 · 2025-05-13 | 8.6 | 68% | 2025-05-13 |
| CVE-2026-2699CheckProgress ShareFile Storage Zones Controller - Authentication BypassProgress · ShareFile Storage Zones Controller · CVSS 9.8 · 2026-04-02 | 9.8 | 58% | 2026-04-02 |
| CVE-2026-58455CheckDockwatch <= 0.6.567 - OS Command InjectionNotifiarr · dockwatch · CVSS 9.8 · 2026-07-02 | 9.8 | 8.0% | 2026-07-02 |
| CVE-2024-3376SourceCodester Computer Laboratory Management System config.php redirectSourceCodester · Computer Laboratory Management System · CVSS 7.3 · 2024-04-06 | 7.3 | 1.3% | 2024-04-06 |
| CVE-2024-2569SourceCodester Employee Task Management System admin-manage-user.php redirectSourceCodester · Employee Task Management System · CVSS 7.3 · 2024-03-17 | 7.3 | 1.2% | 2024-03-17 |
| CVE-2024-2573SourceCodester Employee Task Management System task-info.php redirectSourceCodester · Employee Task Management System · CVSS 7.3 · 2024-03-18 | 7.3 | 1.0% | 2024-03-18 |
| CVE-2024-2572SourceCodester Employee Task Management System task-details.php redirectSourceCodester · Employee Task Management System · CVSS 7.3 · 2024-03-18 | 7.3 | 1.0% | 2024-03-18 |
| CVE-2024-2571SourceCodester Employee Task Management System manage-admin.php redirectSourceCodester · Employee Task Management System · CVSS 7.3 · 2024-03-18 | 7.3 | 1.0% | 2024-03-18 |
| CVE-2024-2570SourceCodester Employee Task Management System edit-task.php redirectSourceCodester · Employee Task Management System · CVSS 7.3 · 2024-03-18 | 7.3 | 1.0% | 2024-03-18 |
| CVE-2025-9848ScriptAndTools Real Estate Management System userlist.php redirectScriptAndTools · Real Estate Management System · CVSS 7.3 · 2025-09-03 | 7.3 | 0.6% | 2025-09-03 |
| CVE-2026-16323Authentication Bypass via Execution After Redirect in FuyaSoft's Architect Panel Web Management PanelFuyaWeb Internet and Informatics Services · ArchitectPanel Web Admin Panel · CVSS 7.5 · 2026-08-21 | 7.5 | 0.6% | 2026-08-21 |
| CVE-2025-8350Authentication Bypass with Redirect in BiEticaret Software's BiEticaret CMSInrove Software and Internet Services · BiEticaret CMS · CVSS 9.8 · 2026-02-19 | 9.8 | 0.6% | 2026-02-19 |
| CVE-2025-6967Authentication Bypass in Sarman Soft's CMSSarman Soft Software and Technology Services Industry and T… · CMS · CVSS 8.7 · 2026-02-10 | 8.7 | 0.5% | 2026-02-10 |
| CVE-2026-73696Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndexControl Web Panel · Control Web Panel · CVSS 8.1 · 2026-11-02 | 8.1 | 0.5% | 2026-11-02 |
| CVE-2026-3264go2ismail Free-CRM Administrative redirectgo2ismail · Free-CRM · CVSS 6.3 · 2026-02-26 | 6.3 | 0.5% | 2026-02-26 |
| CVE-2026-3262go2ismail Asp.Net-Core-Inventory-Order-Management-System Administrative redirectgo2ismail · Asp.Net-Core-Inventory-Order-Management-System · CVSS 6.3 · 2026-02-26 | 6.3 | 0.5% | 2026-02-26 |
| CVE-2026-120341mathurvishal CloudClassroom-PHP-Project studentdetails.php redirectmathurvishal · CloudClassroom-PHP-Project · CVSS 7.3 · 2026-11-02 | 7.3 | 0.5% | 2026-11-02 |
| CVE-2024-2635Multiple vulnerabilities on Meta4 HR from CegidCegid · Meta4 HR · CVSS 7.3 · 2024-03-19 | 7.3 | 0.4% | 2024-03-19 |
| CVE-2025-53077An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of…Samsung Electronics · DMS(Data Management Server) · CVSS 6.5 · 2025-07-29 | 6.5 | 0.4% | 2025-07-29 |
| CVE-2026-74049Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)Apache Software Foundation · Apache Tomcat · CVSS 6.1 · 2026-10-20 | 6.1 | 0.4% | 2026-10-20 |
| CVE-2026-10271a4m4 Student-Management-System Admin Endpoint admin redirecta4m4 · Student-Management-System · CVSS 6.3 · 2026-06-01 | 6.3 | 0.3% | 2026-06-01 |
| CVE-2026-61407Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability. A low privileged attacker with local access could pot…Dell · Watchdog Timer Driver · CVSS 8.8 · 2026-08-18 | 8.8 | 0.2% | 2026-08-18 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.