CVE-2026-48611EPSS p33.2%

CVE-2026-48611CVE-2026-48611

Description

Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.

Scoring

CVSS 9.8 ()
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.42% probability of exploitation · percentile 33.2% · 2026-06-19T12:03:05Z
Last modified2026-06-12
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.