Description
uBB.threads is vulnerable to a Cross-Site Request Forgery (CSRF) due to a lack of protective mechanisms. This allows an attacker to trick an authenticated user into executing unintended actions. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 7.7.5 but may also affect other versions.
References (2)
Core 2
Core References
Product product
https://www.ubbcentral.com/
Third Party Advisory third-party-advisory
https://cert.pl/en/posts/2026/06/CVE-2026-54219
Scores
CVSS v4
8.6
EPSS
0.0019
EPSS Percentile
8.6%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-352
Status
published
Products (1)
UBB Systems/UBB.threads
< 7.7.5
Published
Jun 18, 2026
Tracked Since
Jun 18, 2026