CVE-2026-47657

HumHub CVE-2026-47657 affects HumHub versions 1.13.0–1.18.2. A missing authorization check in the Space member management controller lets any authenticated user remove all members from any Space, regardless of their role. The issue is fixed in version 1.18.3; upgrade to 1.18.3 or later. The CVSSv...