CVE-2026-47366CWE-284

Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated administrator to…

High · published June 12, 2026

CVSS v3.0
7.2
EPSS
1%
Percentile
44.4
In the wild
Unconfirmed
What it is

Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated administrator to grant permissions beyond the level authorized for their account, resulting in privilege escalation within the administrative interface.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00537 · 44.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-06-12T02:27Z
EPSS history
Timeline
  • 12 JUN 02:27Z
    Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated administrator to…
    cvelistv5