Raphael Karger discovered an unauthenticated privilege escalation issue when new user registration is enabled.
bbpress.org/blog/2020/05/bbpress-2-6-5-is-out/
vulners.com/exploitdb/EDB-ID:48534