CVE-2016-9416: mybb merge system – CVSS 9.8 · Watchpost