Ubb Systems Ubb.threads
6 CVEs affecting Ubb Systems Ubb.threads. Latest disclosed: 2026-06-18. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-54224 | | 2026-06-18 | UBB.threads is vulnerable to Denial of Service (DoS). By sending multiple concurrent requests to view any user profile on instances with many registered users… | |
CVE-2026-54223 | | 2026-06-18 | UBB.threads is vulnerable to Path traversal, allowing attackers with privilege to edit templates to read and write any file on the application’s server that ap… | |
CVE-2026-54222 | | 2026-06-18 | UBB.threads is vulnerable to Blind SQL Injection, allowing attackers with access to the Members in Control Panel to interact with the underlying database. Due… | |
CVE-2026-54221 | | 2026-06-18 | UBB.threads is vulnerable to Reflected XSS. The application improperly handles user input in certain requests, enabling attackers to execute arbitrary JavaScri… | |
CVE-2026-54220 | | 2026-06-18 | uBB.threads is vulnerable to a Cross-Site Request Forgery (CSRF) due to a lack of protective mechanisms. This allows an attacker to trick an authenticated user… | |
CVE-2026-54219 | | 2026-06-18 | UBB.threads is vulnerable to Stored XSS via user posts and user profile fields. The application fails to properly sanitize user input, allowing low privileged… |