{"cvss":0.0,"datePublished":"2026-07-20T00:00:00Z","dateUpdated":"2026-07-20T00:00:00Z","description":"Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.","dueDate":"","id":"CVE-2026-48611","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"phpbb","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"phpbb phpbb Improper Authentication","vendor":"phpbb"}