CVE-2016-9420: Mybb Merge System

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified impact via vectors related to "loose comparison false positives."

Affected products

• Mybb Merge System: up to and including 1.8.7
• Mybb Mybb: up to and including 1.8.7

Published 2017-01-31. Last modified 2026-06-17.