CVE-2026-48969
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Versions of Really Simple SSL up to 9.5.9 have a vulnerability in access control that may allow subscribers unauthorized access to resources.
Risk Assessment
Organizations may be exposed to unauthorized access to sensitive data, potentially leading to privacy and security breaches.
Recommendation
It is recommended to update the Really Simple SSL plugin to the latest version to mitigate this vulnerability.
Other vulnerabilities in Really Simple SSL
See all- CVE-2026-84775Medium
Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions.
- CVE-2026-84777High
Unauthenticated Broken Authentication in Really Simple SSL versions up to 9.8.0.
- CVE-2026-48970High
Versions of Really Simple SSL up to 9.5.10 have a vulnerability in authentication that allows for unauthorized access.
Original NVD description (English source)
Subscriber Broken Access Control in Really Simple SSL <= 9.5.9 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS