Ubb.threads (Ubb Systems) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-06-18. Vendor: Ubb Systems.

CVEs of Ubb.threads

• CVE-2026-54224 - CVSS 7.1 (high), 2026-06-18: UBB.threads is vulnerable to Denial of Service (DoS). By sending multiple concurrent requests to view any user profile on instances with many registered…
• CVE-2026-54223 - CVSS 8.6 (high), 2026-06-18: UBB.threads is vulnerable to Path traversal, allowing attackers with privilege to edit templates to read and write any file on the application’s server that…
• CVE-2026-54222 - CVSS 8.6 (high), 2026-06-18: UBB.threads is vulnerable to Blind SQL Injection, allowing attackers with access to the Members in Control Panel to interact with the underlying database. Due…
• CVE-2026-54221 - CVSS 5.1 (medium), 2026-06-18: UBB.threads is vulnerable to Reflected XSS. The application improperly handles user input in certain requests, enabling attackers to execute arbitrary…
• CVE-2026-54220 - CVSS 8.6 (high), 2026-06-18: uBB.threads is vulnerable to a Cross-Site Request Forgery (CSRF) due to a lack of protective mechanisms. This allows an attacker to trick an authenticated…
• CVE-2026-54219 - CVSS 5.1 (medium), 2026-06-18: UBB.threads is vulnerable to Stored XSS via user posts and user profile fields. The application fails to properly sanitize user input, allowing low privileged…