CVE-2017-16780: Mybb

Critical severity, CVSS 9.8. EPSS: 5.8% chance of exploitation in the next 30 days.

The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.

Affected products

• Mybb Mybb: up to and including 1.8.12

Published 2017-11-10. Last modified 2026-06-17.