CVE-2026-73313 | XenForo up to 2.3.12 Passkey TFA Provider improper authentication

September 8, 2026 Yanac

A vulnerability identified as critical has been detected in XenForo up to 2.3.12. This issue affects some unknown processing of the component Passkey TFA Provider. The manipulation leads to improper authentication.

This vulnerability is documented as CVE-2026-73313. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More