m
mybb
Security Risk Profile
36
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 176 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 13, 2005 to present
176
Total CVEs
64
Critical+High
0
Exploited
30
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
30
Critical/High
Risk Level
36/100
low
🆕 17Fresh (<7d)📈 17 in Last 30 Days
Severity Distribution
Critical
13High
51Medium
107Low
5Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
XSS
74
2
SQL Injection
23
3
CSRF
15
4
Infoleak
9
5
SSRF
8
Most Affected Products
1. Mybb Mybb1056
2. MyBB MyBB101
3. MyBB Merge System26
4. Mybboard Mybb6
5. MyBB Group MyBB4
Recent Vulnerabilities
See more →CVE-2026-45118
CVSS 9.3critical
MyBB: Contact page reflected XSS
Aug 18, 2026🔧 No Patch
CVE-2026-45129
CVSS 4.6medium
MyBB: ACP Recovery Codes CSRF
Aug 18, 2026🔧 No Patch
CVE-2026-45124
CVSS 4.3medium
MyBB: Mod CP report resolution missing authorization
Aug 18, 2026🔧 No Patch
CVE-2026-45120
CVSS 5.4medium
MyBB: Insufficient authorization for private calendar events
Aug 18, 2026🔧 No Patch
CVE-2026-47245
CVSS 4.3medium
MyBB: Buddy list corruption
Aug 18, 2026🔧 No Patch
CVE-2026-45734
CVSS 5.3medium
MyBB: Default CAPTCHA missing invalidation
Aug 18, 2026🔧 No Patch
CVE-2026-45122
CVSS 4.3medium
MyBB: Insufficient permission check for calendar event move
Aug 18, 2026🔧 No Patch
CVE-2026-45119
CVSS 4.6medium
MyBB: ACP UTF-8 Conversion CSRF
Aug 18, 2026🔧 No Patch
CVE-2026-45126
CVSS 3.5low
MyBB: ACP Questions state CSRF
Aug 18, 2026🔧 No Patch
CVE-2026-45116
CVSS 8.7high
MyBB: Profile field type confusion XSS
Aug 18, 2026🔧 No Patch
Monitor mybb in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.