PT-2026-68184

Name of the Vulnerable Software and Affected Versions Flarum versions prior to 1.8.16 Description Unauthenticated attackers can reuse expired password reset tokens by submitting them directly to the '/reset' endpoint. This occurs because the SavePasswordController::handle method utilizes...

CVE-2026-39923: Use of a Key Past its Expiration Date

Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated attackers to reuse expired password reset tokens by submitting them directly to the reset processing endpoint. The SavePasswordController::handle method calls PasswordToken::findOrFail...