CVE-2026-48906 | tassos.gr Novarain access control

A vulnerability classified as critical was found in tassos.gr Novarain, Tassos Framework, Convert Forms, EngageBox, Google Structured Data, Advanced Custom Fields, Smile Pack, Tassos Code Snippets and MailChimp Auto-Subscribe. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to improper access controls.

This vulnerability appears as CVE-2026-48906. The attack may be performed from remote. There is no available exploit.