CWE-705: Incorrect Control Flow Scoping

The product does not properly return control flow to the proper location after it has completed a task or detected an unusual condition.

8 tracked CVEs are classified under this weakness.

Highest-risk vulnerabilities

CVE-2025-53856 — TMM vulnerability
CVE-2025-9848 — ScriptAndTools Real Estate Management System userlist.php redirect
CVE-2026-3264 — go2ismail Free-CRM Administrative redirect
CVE-2026-55537 — PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114
CVE-2026-45819 — baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input para
CVE-2026-10271 — a4m4 Student-Management-System Admin Endpoint admin redirect
CVE-2026-3449 — Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resol

CVE-2026-55537 — PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114
CVE-2026-45819 — baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input para
CVE-2026-10271 — a4m4 Student-Management-System Admin Endpoint admin redirect
CVE-2026-3449 — Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resol
CVE-2026-3264 — go2ismail Free-CRM Administrative redirect
CVE-2025-53856 — TMM vulnerability
CVE-2025-9848 — ScriptAndTools Real Estate Management System userlist.php redirect