CVE-2026-48611

No fix known EPSS 4%CVSS 9.8

Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.

Published 2026-06-12 · CVE record · OSV

Products: phpBB