CVE-2026-48611EPSS p86.4%

CVE-2026-48611CVE-2026-48611

Description

Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.

Scoring

CVSS 9.8 ()
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS2.89% probability of exploitation · percentile 86.4% · 2026-10-05T12:00:23Z
Last modified2026-06-12
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.