PT-2026-48820 · Phpbb · Phpbb

Published 2026-06-12 · Updated 2026-06-12 · CVE-2026-47366

Mitre

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated administrator to grant permissions beyond the level authorized for their account, resulting in privilege escalation within the administrative interface.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-47366

Affected Products

Phpbb

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-47366 · Security Note
• https://phpbb.com/community/viewtopic.php?t=2672170 · Note