CVE-2026-48970
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Versions of Really Simple SSL up to 9.5.10 have a vulnerability in authentication that allows for unauthorized access.
Risk Assessment
Organizations may be exposed to attacks that exploit this vulnerability to gain control over the system.
Recommendation
It is recommended to update the Really Simple SSL plugin to the latest version to mitigate this vulnerability.
Other vulnerabilities in Really Simple SSL
See all- CVE-2026-84775Medium
Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions.
- CVE-2026-84777High
Unauthenticated Broken Authentication in Really Simple SSL versions up to 9.8.0.
- CVE-2026-48969Medium
Versions of Really Simple SSL up to 9.5.9 have a vulnerability in access control that may allow subscribers unauthorized access to resources.
Original NVD description (English source)
Unauthenticated Broken Authentication in Really Simple SSL <= 9.5.10 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS