CVE-2026-74239
XenForo < 2.3.13 Path Traversal via Style Archive Importer on Windows
CVSS score
8.6
EPSS probability
%0.9
Risk score
0.1
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Sanitized XenForo write-up and proof of concept for CVE-2026-74239.
Makefile Go / Python
Similar Vulnerabilities
9.1
CVE-2026-73309
XenForo < 2.3.13 Authentication Bypass via OAuth2 Token Endpoint
X
Patch verifiedEPSS %1
8.7
CVE-2026-73314
XenForo < 2.3.13 Signature Verification Bypass via PayPal REST Webhook
X
Patch verifiedEPSS %1
9.1
CVE-2026-73311
XenForo < 2.3.13 OAuth2 Authorization Code Reuse
X
Patch verifiedEPSS %0
7.6
CVE-2026-73313
XenForo < 2.3.13 MFA Bypass via Passkey TFA Provider
X
Patch verifiedEPSS %1
7.1
CVE-2026-73321
XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser
X
Patch verifiedEPSS %1
9.1
CVE-2026-73312
XenForo < 2.3.13 Refresh Token Replay via Expired Access Token
X
Patch verified Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-74239"