HIGH 8.2 NVD
CVE-2026-73310
XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoint that allows attackers controlling any allowlisted redirect URI to bypass redir
XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoint that allows attackers controlling any allowlisted redirect URI to bypass redirect URI binding by submitting a different allowlisted URI than the one recorded at authorization time. Attackers can exchange an intercepted authorization code using a mismatched redirect URI to steal OAuth2 tokens from intercepted authorization flows.
Affected Products
- xenforo/xenforo
References
- https://bombobombone.github.io/posts/cve-2026-73310/
- https://github.com/BomboBombone/CVE-2026-73310
- https://www.vulncheck.com/advisories/xenforo-oauth2-authorization-code-token-theft-via-red
- https://xenforo.com/community/threads/security-fixes-released-for-all-xenforo-and-media-ga
- https://xenforo.com/community/threads/xenforo-2-3-13-and-add-ons-released-includes-securit
This high severity vulnerability with a CVSS score of 8.2 was published on 2026-09-08 via NVD. Affected: xenforo/xenforo.
vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.