CVE-2026-48611

Published Jun 11, 2026·Updated Jun 17, 2026

NVD Description

Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.

Public Exploits & PoCs4 found

PoC: phpBB-CVE-2026-48611

Automated PoC for CVE-2026-48611 — phpBB OAuth login_link authentication bypass

PoC: CVE-2026-48611-phpBB

Bypass Authentication

PoC: CVE-2026-48611-EXPLOIT

CVE-2026-48611- authentication bypass in phpBB

PoC: CVE-2026-48611-poc

(phpBB authentication bypass)

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free