CVE-2025-70758

The record

chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via header(Location:login.php) when a user is not authenticated but fails to call exit() afterward. This allows remote unauthenticated attackers to access protected pages.customer database.

Affected packages

Related vulnerabilities

• CVE-2026-80135 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-703
• CVE-2026-57445 Gardens v2 is a modular governance framework that enables communities to create and… CWE-703
• CVE-2026-82417 ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own… CWE-703
• CVE-2026-26446 Stomper 5e2741e is vulnerable to Denial of Service. CWE-703
• CVE-2026-18638 Any authenticated Velociraptor user — including one holding only the readerrole — can… CWE-703
• CVE-2026-56818 Netty is an asynchronous, event-driven network application framework. CWE-703
• CVE-2026-20187 As part of Cisco's ongoing commitment to proactive security and product quality, the… CWE-703
• CVE-2026-51600 Tenda CP3 V3.0 firmware V31.1.9.91 does not validate the Content-Length header field in… CWE-703