What’s Vulnerable › Products
Flarum Framework vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your Flarum Framework version is affected
Latest Flarum Framework vulnerabilities
- CVE-2026-39924 — Flarum < 1.8.16 Session Persistence via Improper Access Token Revocation (CVSS 6.8)
- CVE-2026-39923 — Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset (CVSS 8.1)