CVE-2026-120007 | NodeBB 1.18.0/4.16.5 Registration /register/complete uid authorization

October 30, 2026 Yanac

A vulnerability labeled as critical has been found in NodeBB 1.18.0/4.16.5. This issue affects some unknown processing of the file /register/complete of the component Registration. Executing a manipulation of the argument uid can lead to authorization bypass.

The identification of this vulnerability is CVE-2026-120007. The attack may be launched remotely. There is no exploit available.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More