CVE-2026-47366

published 2026-06-12

CVE-2026-47366: Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated administrator to…

Priority P3 45 high 7.2 CVSS 3.0

AV N AC L PR H UI N S U C H I H A H

Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated administrator to grant permissions beyond the level authorized for their account, resulting in privilege escalation within the administrative interface.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
phpbb	phpbb	3.3.0 – 3.3.16	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-284