Post

Sanqui 🦉
@sanqui.net

Every phpBB forum that hasn't been updated to 3.3.17 (released last Saturday) is vulnerable to a trivial admin session hijack. Tell your local phpBB admin to upgrade. pentest-tools.com/research/php... www.phpbb.com/community/vi...

pentest-tools.comphpBB authentication bypass: CVE-2026-48611 and CVE-2026-48612Two critical phpBB vulnerabilities found by Pentest-Tools.com let attackers hijack accounts without a password. See how they work, who's affected and the fixes.

6 reposts6 likes

No replies yet.