Security Advisory

CVE-2026-35056

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-01 00:30:13

Last updated 2026-05-25 23:42:08

Assigner VulnCheck

State PUBLISHED

Description

XenForo before 2.3.9 and before 2.2.18 allows remote code execution (RCE) by authenticated, but malicious, admin users. An attacker with admin panel access can execute arbitrary code on the server.

← Browse all CVEs View on cve.org ↗