Critical phpBB Flaw Lets Attackers Hijack Any Account with One Request

Multiple high-risk vulnerabilities and active exploit campaigns reported: a critical phpBB authentication-bypass allows account takeover with a single request; Google released a patch for CVE-2026-11645 (remote code execution in Chrome sandbox) exploited in the wild; Check Point’s Remote Access/Mobile Access suffers a critical auth bypass actively exploited by Qilin; Everest Forms Pro has an exploited RCE enabling rogue WordPress admin account creation; a 1-click Flowise RCE PoC can fully compromise self-hosted servers; Meta experienced an AI-related account recovery flaw exposing >20,000 IGs;