M
Vendor security profile
mybb
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs22
Critical2
CISA KEV0
Public exploit4
Patch rate%0
Avg. CVSS5.7
12-month vulnerability rate
0
0
0
0
0
4
0
0
0
18
0
0
CVE KEV
CVE severity distribution
22toplam CVE
Critical2 (9%)
High3 (14%)
Medium14 (64%)
Low3 (14%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%18
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
22Unknown
Latest vulnerabilities
9.3
CVE-2026-45118
MyBB: Contact page reflected XSS
M
Patch status unknownEPSS %1
9.8
CVE-2026-45117
MyBB: Installer database configuration RCE
M
Patch status unknownEPSS %1
4.6
CVE-2026-45129
MyBB: ACP Recovery Codes CSRF
M
Patch status unknownEPSS %0
4.3
CVE-2026-45124
MyBB: Mod CP report resolution missing authorization
M
Patch status unknownEPSS %0
5.4
CVE-2026-45120
MyBB: Insufficient authorization for private calendar events
M
Patch status unknownEPSS %0
4.3
CVE-2026-47245
MyBB: Buddy list corruption
M
Patch status unknownEPSS %0
5.3
CVE-2026-45734
MyBB: Default CAPTCHA missing invalidation
M
Patch status unknownEPSS %1
5.3
CVE-2026-45125
MyBB: Email User CRLF injection
M
Patch status unknownEPSS %0
4.3
CVE-2026-45122
MyBB: Insufficient permission check for calendar event move
M
Patch status unknownEPSS %0
4.6
CVE-2026-45119
MyBB: ACP UTF-8 Conversion CSRF
M
Patch status unknownEPSS %0