PT-2026-31618 · Phpbb · Phpbb

CVE-2025-70811 · Published 2026-04-09 · Updated 2026-04-09

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Phpbb versions 3.3.15

Description A Cross Site Request Forgery issue exists in Phpbb phbb3 version 3.3.15. A local attacker can potentially execute arbitrary code through the Admin Control Panel icon management functionality.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the Admin Control Panel icon management functionality.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-70811

GHSA-56PV-XG3W-6822

Affected Products

Phpbb

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/70xxx/CVE-2025-70811.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-70811 · Security Note
• https://osv.dev/vulnerability/CVE-2025-70811 · Vendor Advisory
• https://github.com/ariefibis/PHPBB/security/advisories/GHSA-56pv-xg3w-6822 · Vendor Advisory
• https://twitter.com/CVEnew/status/2042302845350002759 · Twitter Post
• https://linkedin.com/in/mohammed-a-6a2548112 · Note
• https://github.com/ariefibis · Note