Vendors / UBB Systems Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now UBB Systems records in CISA KEV No UBB Systems vulnerabilities are listed in CISA KEV.
Priority MEDIUM 40
UBB.threads is vulnerable to Path traversal, allowing attackers with privilege to edit templates to read and write any file on the application’s server that application has privileges to, what results in Remote Code Exec…
CVSS 4.0 HIGH 8.6· Network · High privileges · No interaction · EPSS 0.00628 · Published 2026-06-18 · No fix listed CWE-22
Priority LOW 39
UBB.threads is vulnerable to Blind SQL Injection, allowing attackers with access to the Members in Control Panel to interact with the underlying database.
CVSS 4.0 HIGH 8.6· Network · High privileges · No interaction · EPSS 0.00305 · Published 2026-06-18 · No fix listed CWE-89
Priority LOW 38
uBB.threads is vulnerable to a Cross-Site Request Forgery (CSRF) due to a lack of protective mechanisms.
CVSS 4.0 HIGH 8.6· Network · No auth · User interaction · EPSS 0.00187 · Published 2026-06-18 · No fix listed CWE-352
Priority LOW 31
UBB.threads is vulnerable to Denial of Service (DoS).
CVSS 4.0 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00272 · Published 2026-06-18 · No fix listed CWE-405
Priority LOW 23
UBB.threads is vulnerable to Reflected XSS.
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00293 · Published 2026-06-18 · No fix listed CWE-79
Priority LOW 23
UBB.threads is vulnerable to Stored XSS via user posts and user profile fields.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00293 · Published 2026-06-18 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 4 2 0 0
THREATIST.IORead the docs