Flarum Framework vulnerabilities

• flarum framework Flarum < 1.8.16 Session Persistence via Improper Access Token Revocation CVE-2026-39924 7.6 HighAugust 5, 2026
• flarum framework Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset CVE-2026-39923 9.2 CriticalAugust 5, 2026