CVE-2026-73318 | XenForo up to 2.3.12 Force-Agreement Controller improper authorization

September 8, 2026 Yanac

A vulnerability was found in XenForo up to 2.3.12. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component Force-Agreement Controller. This manipulation causes improper authorization.

This vulnerability is tracked as CVE-2026-73318. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More