CVE-2026-84777
HighCVSS 7.4Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Unauthenticated Broken Authentication in Really Simple SSL versions up to 9.8.0.
Risk Assessment
Unauthenticated users could bypass authentication mechanisms, potentially leading to unauthorized access.
Recommendation
Update the plugin to the latest version and review authentication configuration.
Other vulnerabilities in Really Simple SSL
See all- CVE-2026-84775Medium
Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions.
- CVE-2026-48970High
Versions of Really Simple SSL up to 9.5.10 have a vulnerability in authentication that allows for unauthorized access.
- CVE-2026-48969Medium
Versions of Really Simple SSL up to 9.5.9 have a vulnerability in access control that may allow subscribers unauthorized access to resources.
Original NVD description (English source)
Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS