FriendsOfFlarum

Friday, September 25

• GitHub CVE-2026-92161
  FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider

  • FriendsOfFlarum oauth
  • Critical
  • CVSS 9.8
  • EPSS 0.27%
  • Fixed version listed
  15:55 UTC