CVE-2016-9420: mybb merge system – CVSS 9.8 · Watchpost