#cve2026xxxx — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #cve2026xxxx, aggregated by home.social.
-
phpBB Flaw Enables Instant Account Takeover
A single HTTP request can give an attacker instant access to any user's account, including administrator accounts, without needing a password - a vulnerability rated 9.4 on the CVSS scale that's affecting phpBB versions up to 3.3.16 and 4.0.0 alpha.
#AuthenticationBypass #Phpbb #Ptt2026004 #Cve2026xxxx #SessionHijacking