Username enumeration via distinct authentication errors

Username enumeration in SEO Panel 4.10.0 allows remote attackers to identify valid accounts through unauthenticated login attempts. The authentication flow returns different error messages for valid and invalid usernames, exposing account existence before a password is accepted. Access to the network-facing login form is sufficient; the disclosure supplies valid usernames for later password brute-force attempts but does not itself grant access.