phpBB forum fixes auth bypass bug lurking for a decade

Published on June 12, 2026

A 10-year-old authentication bypass vulnerability discovered in the phpBB forum software allows an attacker to log in as any user, including administrators. [...]