CVE-2026-48611

CRITICAL CVSS 9.8 View on NVD ↗

Description

Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://www.phpbb.com/community/viewtopic.php?t=2672170

Published: Jun 12, 2026 04:17 UTC Modified: Jun 12, 2026 16:15 UTC