CVE-2026-73309 – CyberSecurityBoard

Critical CVEs

CVE-2026-73309 — Critical vulnerability brief

XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthenticated attackers to obtain valid token pairs…

critical Critical CVE CVE-2026-73309

September 8, 2026