SECURITYJun 12 · 18:19 UTCBLEEPING COMPUTERBill Toulas

phpBB forum fixes auth bypass bug lurking for a decade

A 10-year-old authentication bypass vulnerability in the phpBB forum software allows attackers to log in as any user, including administrators. The vulnerability was recently addressed by the developers.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

phpBBorganizationauthentication bypass vulnerabilitytopicadministratorstopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYMay 14 · 21:07 UTC
Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin
SECURITYMay 30 · 18:02 UTC
Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks
SECURITYApr 30 · 20:49 UTC
cPanel’s authentication bypass bug is being exploited in the wild, CISA warns
SECURITYApr 29 · 15:51 UTC
cPanel, WHM emergency update fixes critical auth bypass bug
SECURITYApr 30 · 22:48 UTC
The Internet Is Falling Down- CPanel/WHM Authentication Bypass CVE-2026-41940
SECURITYMay 4 · 12:18 UTC
Progress warns of critical MOVEit Automation auth bypass flaw