Cyber Resilience

CWE · MITRE source

CWE-698Execution After Redirect (EAR)

Abstraction: Base · CVEs in our corpus: 19

The web application sends a redirect to another location, but instead of exiting, it executes additional code.

Last updated: 21 August 2026 14:15 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-06
  • AC-3 Access Enforcement
  • SA-11 Developer Testing and Evaluation
  • SA-15 Development Process, Standards, and Tools
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2026-2699 9.59.80.58392026-04-02
CVE-2024-48766 8.78.60.69702025-05-13
CVE-2026-58455 7.99.80.04862026-07-02
CVE-2025-8350 7.39.80.00552026-02-19
CVE-2025-6967 6.28.70.00452026-02-10
CVE-2024-2569 6.07.30.01182024-03-18
CVE-2024-3376 6.07.30.01342024-04-06
CVE-2024-2570 5.97.30.01032024-03-18
CVE-2024-2571 5.97.30.01032024-03-18
CVE-2024-2572 5.97.30.01032024-03-18
CVE-2024-2573 5.97.30.01032024-03-18
CVE-2025-9848 5.87.30.00612025-09-03
CVE-2026-614075.88.80.00102026-08-18
CVE-2026-163235.87.50.00372026-08-21
CVE-2024-2635 5.77.30.00432024-03-19
CVE-2025-53077 5.16.50.00312025-07-29
CVE-2026-32625.06.30.00422026-02-26
CVE-2026-32645.06.30.00422026-02-26
CVE-2026-10271 4.96.30.00302026-06-01