🧰 phpBB

The items that name it 3

• Trail of Bits (@trailofbits) on X
  thread2026-10-26It is written here as phpBB (shell demonstrated and covered in production-grade update).

  shell demonstrated and covered in production-grade update

• Authentication Bypass in the default configuration phpBB
  writeup2026-07-03

  Open-source forum software; Site Showcase has over 6 million members

• 10 year old critical vulnerability in phpBB affecting tens of millions of users across thousands of forums
  advisory2026-06-10

  authentication bypass vulnerability exploitable in default configuration, no special knowledge required