Skip to content
OpenAdvisories

Weakness (CWE)

CWE-698: Execution After Redirect (EAR)

Base Incomplete

The web application sends a redirect to another location, but instead of exiting, it executes additional code.

Source: MITRE CWE-698

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-58455 Public exploit

    Dockwatch 0.6.567 Unauthenticated OS Command Injection via ajax/compose.php

    Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing exit() after an authentication redirect in loader.php combined with unsanitized i…

    Notifiarr dockwatch
  • Critical 9.8
    CVE-2026-2699 Public exploit EPSS 58%

    EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)

    Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

    Progress ShareFile Storage Zones Controller
  • High 8.6
    CVE-2024-48766 Public exploit EPSS 68%

    NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and…

    NetAlertX NetAlertX