Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-48780

Forem is open source software for building communities. Prior to commit a2ab6d4, a maliciously crafted email address could allow an attacker to bypass domain allowlist or denylist restrictions and gain access to invite-only forem deployments. The issue is patched as of `a2ab6d4`. As a workaround, some SMTP servers and email delivery providers may drop or refuse to send maliciously crafted email addresses.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:04a41b987aed5099bf640857cc34ce2b54f2b9ff65297126b44bb5fd73d40440
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"forem","vendor":"forem","versions":[{"status":"affected","version":"< a2ab6d4"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7af1a9496d877bb9e841e7e9ae094b4f151118101ed3f99cc646d5d597cea2af · sha256:483f566f04248b24… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:7af1a9496d877bb9e841e7e9ae094b4f151118101ed3f99cc646d5d597cea2af · sha256:483f566f04248b24… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-287","description":"CWE-287: Improper Authentication","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:7af1a9496d877bb9e841e7e9ae094b4f151118101ed3f99cc646d5d597cea2af · sha256:483f566f04248b24… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions
{"name":"https://github.com/forem/forem/commit/a2ab6d409d2676eb0711ecbd737192043125b437","tags":["x_refsource_MISC"],"url":"https://github.com/forem/forem/commit/a2ab6d409d2676eb0711ecbd737192043125b437"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7af1a9496d877bb9e841e7e9ae094b4f151118101ed3f99cc646d5d597cea2af · sha256:483f566f04248b24… · /containers/cna/references/1
{"name":"https://github.com/forem/forem/security/advisories/GHSA-3g4h-9h37-mpx6","tags":["x_refsource_CONFIRM"],"url":"https://github.com/forem/forem/security/advisories/GHSA-3g4h-9h37-mpx6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7af1a9496d877bb9e841e7e9ae094b4f151118101ed3f99cc646d5d597cea2af · sha256:483f566f04248b24… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer