Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2026-39128 CVE-2026-54224 · GHSA-r4cc-xcx2-vp28

Denial of Service in UBB.threads

Priority LOW 31

UBB.threads is vulnerable to Denial of Service (DoS).

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00272 Published 2026-06-18 No fix listed CWE-405
Priority MEDIUM 40

UBB.threads is vulnerable to Path traversal, allowing attackers with privilege to edit templates to read and write any file on the application’s server that application has privileges to, what results in Remote Code Exec…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00628 Published 2026-06-18 No fix listed CWE-22
TI-2026-39126 CVE-2026-54222 · GHSA-wqx8-qrc6-2wpv

Blind SQL Injection in UBB.threads

Priority LOW 39

UBB.threads is vulnerable to Blind SQL Injection, allowing attackers with access to the Members in Control Panel to interact with the underlying database.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00305 Published 2026-06-18 No fix listed CWE-89
TI-2026-39125 CVE-2026-54221 · GHSA-9c46-2jjw-rj67

Reflected XSS in UBB.threads

Priority LOW 23

UBB.threads is vulnerable to Reflected XSS.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00293 Published 2026-06-18 No fix listed CWE-79
TI-2026-39124 CVE-2026-54220 · GHSA-f336-f4qw-pgx2

Cross-Site Request Forgery in UBB.threads

Priority LOW 38

uBB.threads is vulnerable to a Cross-Site Request Forgery (CSRF) due to a lack of protective mechanisms.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00187 Published 2026-06-18 No fix listed CWE-352
TI-2026-39123 CVE-2026-54219 · GHSA-mxqw-8v8m-qpmf

Stored XSS in UBB.threads

Priority LOW 23

UBB.threads is vulnerable to Stored XSS via user posts and user profile fields.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00293 Published 2026-06-18 No fix listed CWE-79