Vulnerability in Flaskbb
CVE-2026-22660
FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by exploiting a type mismatch in the bulk delete protection check. The…
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Flaskbb — versions 0, https://github.com/flaskbb/flaskbb/commit/a5da9a52
Weakness classification (CWE)
References
- disclosure@vulncheck.com (vendor-advisory)
- disclosure@vulncheck.com (patch)
- disclosure@vulncheck.com (third-party-advisory)
Frequently asked questions
- What is CVE-2026-22660?
- CVE-2026-22660 is a high-severity vulnerability in Flaskbb, classified under Incorrect Comparison. CVSS score: 7.2/10. Published 2026-07-10.
- How severe is CVE-2026-22660?
- High severity. CVSS v3 base score is 7.2 out of 10.