Skip to content
OpenAdvisories

Product · flarum

Flarum Framework

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-39924

    Flarum < 1.8.16 Session Persistence via Improper Access Token Revocation

    Flarum before 1.8.16 contains an improper session invalidation vulnerability that allows attackers who hold a valid session token to retain full account access after a victim changes their password, because the access_tokens table is never cleared on password…

    flarum Flarum Framework