CVE-2026-16323: Authentication Bypass in FuyaWeb ArchitectPanel

A newly discovered execution after redirect (EAR) vulnerability, CVE-2026-16323, affects FuyaWeb's ArchitectPanel Web Admin Panel, allowing unauthenticated attackers to bypass authentication controls. This vulnerability impacts version 28072026 of the software, enabling unauthorized access to sensitive data via the admin interface. Currently, there is no public proof-of-concept or evidence of active exploitation. Security experts recommend implementing input validation, restricting network access, and enabling multi-factor authentication where possible. The vulnerability has been assigned a CVSS score of 7.5, indicating a high severity level. Organizations using the affected version should prioritize applying security updates as they become available.

Key Points: • CVE-2026-16323 allows authentication bypass in FuyaWeb's ArchitectPanel. • The vulnerability affects version 28072026 and has a CVSS score of 7.5. • No active exploitation or proof-of-concept has been reported yet.