# CWE-698.

Every Advisory and CVE whose sources give the weakness CWE-698, newest first.

## Records, newest first

- [Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex](https://agentprime.io/advisories/CVE-2026-73696.md)
  `CVE-2026-73696` · CVE record: Control Web Panel Control Web Panel · CVSS 8.6 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-698
- [mathurvishal CloudClassroom-PHP-Project studentdetails.php redirect](https://agentprime.io/advisories/CVE-2026-120341.md)
  `CVE-2026-120341` · CVE record: mathurvishal CloudClassroom-PHP-Project · CVSS 6.9 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-698, CWE-705
- [Apache Tomcat: Jasper JSTL \<c:redirect> plug-in implementation omits page abort (SKIP_PAGE)](https://agentprime.io/advisories/CVE-2026-74049.md)
  `CVE-2026-74049` · CVE record: Apache Software Foundation Apache Tomcat · CVSS 6.1 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-698
- [Authentication Bypass via Execution After Redirect in FuyaSoft's Architect Panel Web Management Panel](https://agentprime.io/advisories/CVE-2026-16323.md)
  `CVE-2026-16323` · CVE record: FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel · CVSS 7.5 High · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-698
- [Dell Watchdog Timer Driver: Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with…](https://agentprime.io/advisories/CVE-2026-61407.md)
  `CVE-2026-61407` · CVE record: Dell Watchdog Timer Driver · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-698
- [Dockwatch 0.6.567 Unauthenticated OS Command Injection via ajax/compose.php](https://agentprime.io/advisories/CVE-2026-58455.md)
  `CVE-2026-58455` · CVE record: Notifiarr dockwatch · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection, CWE-698
- [a4m4 Student-Management-System Admin Endpoint admin redirect](https://agentprime.io/advisories/CVE-2026-10271.md)
  `CVE-2026-10271` · CVE record: a4m4 Student-Management-System · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-698, CWE-705
- [EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)](https://agentprime.io/advisories/CVE-2026-2699.md)
  `CVE-2026-2699` · CVE record: Progress ShareFile Storage Zones Controller · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.58 · Not analysed yet · Published 2 Apr 2026 · Tags: Broken access control, CWE-698
- [go2ismail Free-CRM Administrative redirect](https://agentprime.io/advisories/CVE-2026-3264.md)
  `CVE-2026-3264` · CVE record: go2ismail Free-CRM · CVSS 5.3 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: CWE-698, CWE-705
- [go2ismail Asp.Net-Core-Inventory-Order-Management-System Administrative redirect](https://agentprime.io/advisories/CVE-2026-3262.md)
  `CVE-2026-3262` · CVE record: go2ismail Asp.Net-Core-Inventory-Order-Management-System · CVSS 5.3 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: CWE-698, CWE-705
- [Authentication Bypass with Redirect in BiEticaret Software's BiEticaret CMS](https://agentprime.io/advisories/CVE-2025-8350.md)
  `CVE-2025-8350` · CVE record: Inrove Software and Internet Services BiEticaret CMS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Feb 2026 · Tags: Authentication bypass, CWE-698
- [Authentication Bypass in Sarman Soft's CMS](https://agentprime.io/advisories/CVE-2025-6967.md)
  `CVE-2025-6967` · CVE record: Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. CMS · CVSS 8.7 High · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-698
- [ScriptAndTools Real Estate Management System userlist.php redirect](https://agentprime.io/advisories/CVE-2025-9848.md)
  `CVE-2025-9848` · CVE record: ScriptAndTools Real Estate Management System · CVSS 6.9 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: CWE-698, CWE-705
- [Samsung Electronics DMS(Data Management Server): An execution after redirect in Samsung DMS(Data Management Server) allows attackers to…](https://agentprime.io/advisories/CVE-2025-53077.md)
  `CVE-2025-53077` · CVE record: Samsung Electronics DMS(Data Management Server) · CVSS 6.5 Medium · Not analysed yet · Published 29 Jul 2025 · Tags: CWE-698
- [NetAlertX: NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP…](https://agentprime.io/advisories/CVE-2024-48766.md)
  `CVE-2024-48766` · CVE record: NetAlertX NetAlertX · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.68 · Not analysed yet · Published 13 May 2025 · Tags: CWE-698
- [SourceCodester Computer Laboratory Management System config.php redirect](https://agentprime.io/advisories/CVE-2024-3376.md)
  `CVE-2024-3376` · CVE record: SourceCodester Computer Laboratory Management System · CVSS 7.3 High · Not analysed yet · Published 6 Apr 2024 · Tags: CWE-698
- [Multiple vulnerabilities on Meta4 HR from Cegid](https://agentprime.io/advisories/CVE-2024-2635.md)
  `CVE-2024-2635` · CVE record: Cegid Meta4 HR · CVSS 7.3 High · Not analysed yet · Published 19 Mar 2024 · Tags: CWE-698
- [SourceCodester Employee Task Management System task-info.php redirect](https://agentprime.io/advisories/CVE-2024-2573.md)
  `CVE-2024-2573` · CVE record: SourceCodester Employee Task Management System · CVSS 7.3 High · Not analysed yet · Published 18 Mar 2024 · Tags: CWE-698
- [SourceCodester Employee Task Management System task-details.php redirect](https://agentprime.io/advisories/CVE-2024-2572.md)
  `CVE-2024-2572` · CVE record: SourceCodester Employee Task Management System · CVSS 7.3 High · Not analysed yet · Published 18 Mar 2024 · Tags: CWE-698
- [SourceCodester Employee Task Management System manage-admin.php redirect](https://agentprime.io/advisories/CVE-2024-2571.md)
  `CVE-2024-2571` · CVE record: SourceCodester Employee Task Management System · CVSS 7.3 High · Not analysed yet · Published 18 Mar 2024 · Tags: CWE-698
- [SourceCodester Employee Task Management System edit-task.php redirect](https://agentprime.io/advisories/CVE-2024-2570.md)
  `CVE-2024-2570` · CVE record: SourceCodester Employee Task Management System · CVSS 7.3 High · Not analysed yet · Published 18 Mar 2024 · Tags: CWE-698
- [SourceCodester Employee Task Management System admin-manage-user.php redirect](https://agentprime.io/advisories/CVE-2024-2569.md)
  `CVE-2024-2569` · CVE record: SourceCodester Employee Task Management System · CVSS 7.3 High · Not analysed yet · Published 17 Mar 2024 · Tags: CWE-698

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-698>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-698/>. Everything for agents: <https://agentprime.io/llms.txt>.