CVE-2026-73310 | XenForo up to 2.3.12 OAuth2 Token Endpoint improper authorization

September 8, 2026 Yanac

A vulnerability was found in XenForo up to 2.3.12 and classified as problematic. Affected is an unknown function of the component OAuth2 Token Endpoint. The manipulation results in improper authorization.

This vulnerability is identified as CVE-2026-73310. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More