CVE-2026-16323: CWE-698 Execution after redirect (EAR) in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel

The vulnerability identified as CVE-2026-16323 involves an Execution After Redirect (EAR) issue in the ArchitectPanel Web Admin Panel by FuyaWeb Internet and Informatics Services. This flaw enables authentication bypass, potentially allowing unauthorized access to the web admin panel. The affected versions include all releases up to and including 28072026. The CVSS 3.1 base score is 7.5, reflecting a network attack vector with low attack complexity, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. There is no information about an available patch or vendor advisory specifying remediation.

Successful exploitation of this vulnerability could allow an attacker to bypass authentication controls, gaining unauthorized access to the ArchitectPanel Web Admin Panel. This could lead to disclosure of sensitive information managed by the admin panel. The vulnerability does not impact integrity or availability according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restricting access to the admin panel and employing additional access controls may reduce risk.