CVE-2026-41887 | flarum framework up to 1.8.15 forum.css uri path traversal

SecurityVulns
Yanac

A vulnerability classified as critical has been found in flarum framework up to 1.8.15. This impacts the function uri of the file forum.css. This manipulation causes path traversal.

This vulnerability is registered as CVE-2026-41887. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More