What is GHSA-f8mc-8mhv-jcrc?

GHSA-f8mc-8mhv-jcrc is a security advisory published by GitHub Security Advisories with High severity. Improper verification of access permissions when modifying permissions through the Administration...

Which CVE IDs does GHSA-f8mc-8mhv-jcrc cover?

GHSA-f8mc-8mhv-jcrc covers the following CVE IDs: CVE-2026-47366. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f8mc-8mhv-jcrc?

GHSA-f8mc-8mhv-jcrc has a CVSS v3 base score of 7.2, published by GitHub Security Advisories.

GHSA-f8mc-8mhv-jcrcHighCVSS 7.2

Improper verification of access permissions when modifying permissions through the Administration...

Vendor

GitHub Security Advisories

Published

June 12, 2026

Last Modified

June 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-47366 →

📋 Description

Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated administrator to grant permissions beyond the level authorized for their account, resulting in privilege escalation within the administrative interface.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-47366
https://www.phpbb.com/community/viewtopic.php?t=2672170
https://github.com/advisories/GHSA-f8mc-8mhv-jcrc