{"uuid": "bfa0cece-08ce-44ef-8240-cefceed38a59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92161", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwgipni7a22q", "content": "CVE-2026-92161 - oauth\nThe FriendsOfFlarum OAuth extension for Flarum (versions before 1.7.4 and 2.0.0\u2011beta.4) trusts email addresses from Discord without confirming they are verified. An attacker who\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oauth #fof #composer #CVE #infosec", "creation_timestamp": "2026-09-26T14:30:05.322609Z"}