CVE-2026-35056 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

XenForo before 2.3.9 and before 2.2.18 allows remote code execution (RCE) by authenticated, but malicious, admin users. An attacker with admin panel access can…
High CVSS: 8.6

CVE-2026-35056

XenForo before 2.3.9 and before 2.2.18 allows remote code execution (RCE) by authenticated, but malicious, admin users. An attacker with admin panel access can execute arbitrary code on the server.
Vendor
Xenforo
Product
Xenforo
CWE
CWE-94
Yayın Tarihi
2026-04-01 01:16:41
Güncelleme
2026-04-01 18:55:19
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-94 Xenforo HIGH Xenforo 2026

Referanslar

https://www.vulncheck.com/advisories/xenforo-remote-code-execution-via-authenticated-admin https://xenforo.com/community/threads/xenforo-2-3-9-inc-xfmg-2-2-18-released-security-fix.235659/