CVE-2026-54224CWE-405

Denial of Service in UBB.threads

High · published June 18, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

UBB.threads is vulnerable to Denial of Service (DoS). By sending multiple concurrent requests to view any user profile on instances with many registered users, an authenticated attacker can easily exhaust database resources and completely deny access to the application for other users.

Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 7.7.5 but may also affect other versions.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00397 · 32.8th percentile
Weakness
CWE-405 · Asymmetric Resource Consumption (Amplification)
Published
2026-06-18T12:56Z
EPSS history
Timeline
  • 18 JUN 12:56Z
    Denial of Service in UBB.threads
    cvelistv5