CVE-2026-74239 | XenForo up to 2.3.12 Style Archive Importer path traversal

September 8, 2026 Yanac

A vulnerability was found in XenForo up to 2.3.12. It has been declared as critical. Affected by this issue is some unknown functionality of the component Style Archive Importer. Such manipulation leads to path traversal.

This vulnerability is listed as CVE-2026-74239. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More