CyberSecBulletin

FriendsOfFlarum vulnerabilities

We track 1 vulnerability in FriendsOfFlarum products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 25, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest FriendsOfFlarum vulnerabilities

  • 9.8 Critical severity

    oauth: Insufficient Verification of Data Authenticity

    CVE-2026-92161FriendsOfFlarum

    FriendsOfFlarum OAuth allows users to log in to Flarum with GitHub, Twitter, Facebook, and other providers. Prior to 1.7.4 and 2.0.0-beta.4, the Discord OAuth provider does not check the verified field returned for an OAuth email before passing the address to