What is the CVSS score of CVE-2026-40784?

CVE-2026-40784 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Fluentboards CVE-2026-40784

Q: Which versions of Fluentboards are affected by CVE-2026-40784?

Authorization bypass in FluentBoards up to 1.91.2 allows authenticated users to access and modify board data belonging to other users.

EUVD-2026-22907 HIGH

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-04-15 Patchstack

WordPress Authentication Bypass Fluentboards Wordpress Plugin

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 15:35 vuln.today

CVSS changed

Apr 15, 2026 - 16:22 NVD

8.1 (HIGH)

EUVD ID Assigned

Apr 15, 2026 - 10:45 euvd

EUVD-2026-22907

CVE Published

Apr 15, 2026 - 10:21 nvd

HIGH 8.1

DescriptionCVE.org

Authorization Bypass Through User-Controlled Key vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through <= 1.91.2.

AnalysisAI

Authorization bypass in FluentBoards up to 1.91.2 allows authenticated users to access and modify board data belonging to other users. The vulnerability, categorized as CWE-639, stems from improper access controls on user-controlled keys. At the time of analysis, no active exploitation has been reported, and EPSS indicates a very low exploitation probability (0.02%).