CVE-2026-27546
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Sep 16, 2026
Vendor
unknown
Description
An unauthenticated remote attacker can exploit an authentication bypass in the _account_log function to log in as an admin, even when accounts are properly configured.