CVE-2026-48969

MediumCVSS 6.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile — higher than 13% of all known CVEs

Versions of Really Simple SSL up to 9.5.9 have a vulnerability in access control that may allow subscribers unauthorized access to resources.

Organizations may be exposed to unauthorized access to sensitive data, potentially leading to privacy and security breaches.

It is recommended to update the Really Simple SSL plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Subscriber Broken Access Control in Really Simple SSL <= 9.5.9 versions.