CVE-2026-51833

XenForo 2.3.8 is affected by an SSRF vulnerability. If an attacker has administrator privileges or can add/save RSS feeds, they can enumerate internal services (ports) or reveal the server’s original IP address. The available sources confirm the vulnerability and its impact, but no remediation de...