Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-71279

XenForo Passkey Security Bypass

Description

XenForo before 2.3.7 contains a security issue affecting Passkeys that have been added to user accounts. An attacker may be able to compromise the security of Passkey-based authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

XenForo XenForo

  • 2.3.0 to < 2.3.7affected

References