CVE-2016-9403: mybb merge system – CVSS 9.8 · Watchpost