phpBB Flaw Enables Instant Account Takeover

A single HTTP request can give an attacker instant access to any user's account, including administrator accounts, without needing a password - a vulnerability rated 9.4 on the CVSS scale that's affecting phpBB versions up to 3.3.16 and 4.0.0 alpha.

https://osintsights.com/phpbb-flaw-enables-instant-account-takeover?utm_source=mastodon&utm_medium=social

#AuthenticationBypass #Phpbb #Ptt2026004 #Cve2026xxxx #SessionHijacking