What’s Vulnerable › Vulnerabilities
CVE-2026-47366
- Severity: high (CVSS 7.2 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-12 · updated 2026-06-17
- Weakness: CWE-284
Description
Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated administrator to grant permissions beyond the level authorized for their account, resulting in privilege escalation within the administrative interface.
Affected products
- phpBB: from 3.3.0 through 3.3.16
References
Get alerted when CVE-2026-47366 or the next vulnerability affects your stack