CVE-2026-48611EPSS p89.1%

CVE-2026-48611CVE-2026-48611

Description

Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.

Scoring

CVSS 9.8 ()
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS3.86% probability of exploitation · percentile 89.1% · 2026-08-03T12:00:16Z
Last modified2026-06-12
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.