CVE-2026-51833

Xenforo 2.3.8 is vulnerable to SSRF. Attackers that have administrator privileges or are able to add/save RSS feeds can enumerate internal services (ports) or expose the original IP address of the server.

List of 623 websites affected by CVE-2026-51833

The domain names are hidden due to the sensitivity of the data. Please click on the "Contact us" button above to get more information.

Domain	Country	Rank
*************.com	United States	,*
****************.com	United States	*,*
*******.com	United States	*,*
******.com	United States	*,*
***.****.com	United States	*,*
**********.com	United States	*,*
***********.com	United States	*,*
**************.com	United States	*,*
**********.net	United States	*,*
********.com	United States	*,*
************.com	United States	*,*
*********.com	United States	*,*
***********.com	United States	*,*
*******.de	United States	*,*
**********.com	United States	*,*
************.com	United States	*,*
*****************.com	United States	*,*
*************.org	United States	*,*
*********..uk	GB	*,*
*******.net	United States	*,*