{"id":"CVE-2026-48611","aliases":["EUVD-2026-36375","GHSA-24pr-8ggp-h88c"],"status":"published","title":"Improper authentication checks in the OAuth implementation allow account hijacking even when...","description":"Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0386,"percentile":0.90251,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-287"],"published":"2026-06-12T02:27:43Z","modified":"2026-06-17T10:55:09Z","exploits":[{"source":"nuclei","id":"CVE-2026-48611","title":"phpBB \u003c 3.3.17 - Authentication Bypass","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48611.yaml"},{"source":"pocgithub","id":"Ethicalgrey/phpBB-CVE-2026-48611","title":"Ethicalgrey/phpBB-CVE-2026-48611","date":"2026-08-30","url":"https://github.com/Ethicalgrey/phpBB-CVE-2026-48611"},{"source":"pocgithub","id":"lxdwnpiper/CVE-2026-48611-phpBB","title":"lxdwnpiper/CVE-2026-48611-phpBB","date":"2026-07-07","url":"https://github.com/lxdwnpiper/CVE-2026-48611-phpBB"}],"products":[{"vendor":"phpbb","product":"phpbb"}],"references":[{"url":"https://www.phpbb.com/community/viewtopic.php?t=2672170"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48611"},{"url":"https://github.com/advisories/GHSA-24pr-8ggp-h88c"}],"sources":{"cve":[{"id":"CVE-2026-48611","description":"Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.","status":"published","published":"2026-06-12T02:27:43.351Z","modified":"2026-06-12T12:55:19.663Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T13:50:49.872037Z"}],"euvd":[{"id":"EUVD-2026-36375","description":"Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.","status":"published","published":"2026-06-12T02:27:43Z","modified":"2026-06-12T12:55:19Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:20:43.577088Z"}],"ghsa":[{"id":"GHSA-24pr-8ggp-h88c","title":"Improper authentication checks in the OAuth implementation allow account hijacking even when...","description":"Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.","status":"published","published":"2026-06-12T06:33:20Z","modified":"2026-06-12T06:33:21Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:08:45.184845Z"}],"nvd":[{"id":"CVE-2026-48611","description":"Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.","status":"published","published":"2026-06-12T04:17:08.18Z","modified":"2026-06-17T10:55:09.423Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:12:23.846948Z"}]}}