PT-2026-50669 · Ubb Systems · Ubb.Threads

Kamil Szczurowski + 1 · Published 2026-06-18 · Updated 2026-06-18 · CVE-2026-54220

NVD

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

uBB.threads is vulnerable to a Cross-Site Request Forgery (CSRF) due to a lack of protective mechanisms. This allows an attacker to trick an authenticated user into executing unintended actions.

Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 7.7.5 but may also affect other versions.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2026-54220

Affected Products

Ubb.Threads

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-54220 · Security Note
• https://ubbcentral.com · Note
• https://cert.pl/en/posts/2026/06/CVE-2026-54219 · Note