CVE-2015-2786

CRITICAL 10.0CVE-2015-2786 · Published 29/03/2015 · updated 17/06/2026

In short

CVE-2015-2786 is a CRITICAL (CVSS 10.0) vulnerability affecting mybb (mybb).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 71.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mybb mybb	`≤ 1.8.3`	No fix yet

Description

Unspecified vulnerability in MyBB (aka MyBulletinBoard) before 1.8.4 has unknown attack vectors related to "Group join request notifications sent to wrong group leaders."

References

blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release · Patch
securityfocus.com/bid/73394

More vulnerabilities in mybb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free