CVE-2026-51833

Xenforo version 2.3.8 is vulnerable to a Server-Side Request Forgery (SSRF) . This flaw allows users with administrator privileges or the ability to add and save RSS feeds to induce the server to make requests to unintended locations. Consequently, an attacker can enumerate internal services and ...