[ Vendor · 1 CVEs ]
FriendsOfFlarum
CVEs affecting FriendsOfFlarum published in the last 30 days, plus any FriendsOfFlarum CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-92161 | 25 Sep 2026 | CVSS 9.8 | FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth providerFriendsOfFlarum OAuth allows users to log in to Flarum with GitHub, Twitter, Facebook, and other providers. Prior to 1.7.4 and 2.0.0-beta.4, the… | Fix |