Skip to content
Threat Feed
Subscribe

Vendor

XenForo

1 brief RSS
high advisory

XenForo OAuth2 Authorization Code Reuse Vulnerability

XenForo versions prior to 2.3.13 contain an OAuth2 authorization code reuse vulnerability (CVE-2026-73311) that allows attackers to obtain unauthorized token pairs by submitting previously used codes.

XenForo web-application vulnerability authentication-bypass cve-2026-73309 web-application-vulnerability
3r 3t 1c