CVE-2026-84777: CWE-288 Authentication Bypass Using an Alternate Path or Channel in Really Simple Plugins Really Simple SSL

CVE-2026-84777 describes an authentication bypass vulnerability in Really Simple SSL (<= 9.8.0) caused by broken authentication mechanisms that can be circumvented using an alternate path or channel. This vulnerability is categorized under CWE-288 and has a CVSS 3.1 base score of 7.4, indicating high severity. The attack vector is network-based with high attack complexity and no privileges or user interaction required. Successful exploitation results in complete confidentiality and integrity compromise but does not affect availability. No patch or official remediation level has been disclosed by the vendor or authoritative sources as of the publication date.

The vulnerability allows unauthenticated attackers to bypass authentication controls, leading to full compromise of confidentiality and integrity of the affected Really Simple SSL plugin. This could enable unauthorized access to sensitive data or administrative functions. Availability is not impacted. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No temporary or official fixes are currently documented.