CVE-2026-54220CWE-352

Cross-Site Request Forgery in UBB.threads

High · published June 18, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
12.3
In the wild
Unconfirmed
What it is

uBB.threads is vulnerable to a Cross-Site Request Forgery (CSRF) due to a lack of protective mechanisms. This allows an attacker to trick an authenticated user into executing unintended actions.

Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 7.7.5 but may also affect other versions.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00223 · 12.3th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2026-06-18T12:56Z
EPSS history
Timeline
  • 18 JUN 12:56Z
    Cross-Site Request Forgery in UBB.threads
    cvelistv5