Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-109692. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This is a vulnerability writeup describing a path disclosure issue in MyBB 1.6 due to improper sanitization of the 'mybb[forumread]' cookie variable. The provided cookie payload triggers an error that reveals the full path to the web root directory.
Description
MyBB 1.6 - Full Path Disclosure
Exploits (1)
exploitdb
WRITEUP
by High-Tech Bridge SA · textwebappsphp
https://www.exploit-db.com/exploits/15325
This is a vulnerability writeup describing a path disclosure issue in MyBB 1.6 due to improper sanitization of the 'mybb[forumread]' cookie variable. The provided cookie payload triggers an error that reveals the full path to the web root directory.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
MyBB 1.6
No auth needed
Prerequisites:
Access to the target MyBB forum · Ability to send crafted cookies
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026