[CVE-2026-48611] Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth i…

Descripción técnica

Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.

Puntuación CVSS

Score: 9.8/10 — Severidad: CRITICAL — Estado NIST: Deferred

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-287

Fuente oficial

Publicado en NIST NVD.