MansionNET has a forum now! :)

https://forum.inthemansion.com is a self-hosted phpBB board for the community around our IRC network, search, radio and git. No ads, no tracking, no third-party CDNs.

Just rooms in a house: a Library, a Garage for self-hosting talk, an Observatory, a Basement for the off-topic stuff, and many more :)

Open for new registrations, so hope to see you here!

#selfhosted #forum #phpbb #foss #privacy

🚨 ACHTUNG!

Falls ihr ein #phpBB-Forum betreibt: Ihr wollt GENAU JETZT GANZ DRINGEND updaten.

Tl;dr: Auth-bypass mit der Option, beliebige (auch admin!)-Konten zu übernehmen.

https://www.golem.de/news/admin-zugriff-fuer-alle-unzaehlige-onlineforen-seit-10-jahren-angreifbar-2606-209759.html

#phpBB #forum fixes auth bypass bug lurking for a decade

https://www.bleepingcomputer.com/news/security/phpbb-forum-fixes-auth-bypass-bug-lurking-for-a-decade/

#cybersecurity

#Discord alternatives #List #OpenSource :

#PHPBB, #Discourse, #Flarum, #Prosody, #Deltachat, #Zulip, etc.

A shocking 10-year-old authentication bypass bug in phpBB has been patched, revealing how easily attackers could gain full admin control over thousands of forums. Discovered by Aikido researchers, this "trivial" flaw underscores the immense security risks of legacy code and the critical importance of prompt patching. Update to phpBB 3.3.17 without delay.

https://www.tpp.blog/1poxum6

#cybersecurity #phpbb #aikido

🤖 This post was AI-generated.

Apparently there is a critical #phpBB vulnerability (CVE-2026-48611) that allows anyone to hijack user accounts on any forum with a vulnerable version that has mostly flown under the radar. Someone on a forum I frequent managed to log into the admin account to demonstrate it.

The fix seems to be to update to phpBB 3.3.17 (or tell the admin of a forum you frequent to do so), ASAP:

https://www.phpbb.com/community/viewtopic.php?t=2672170

phpBB Fixes Decade-Old Auth Bypass Bug

A major vulnerability in phpBB has been uncovered, allowing attackers to bypass authentication and log in as any user, including administrators, with ease and no special knowledge required. This decade-old bug, exploitable in default configurations, has been patched - but only after researchers took steps to privately disclose the issue to prevent…

https://osintsights.com/phpbb-fixes-decade-old-auth-bypass-bug?utm_source=mastodon&utm_medium=social

#AuthBypass #Phpbb #VulnerabilityDisclosure #Hackerone #ApplicationSecurity