CVE-2020-22612: Mybb

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Installer RCE on settings file write in MyBB before 1.8.22.

Affected products

• Mybb Mybb: before 1.8.22 (fixed in 1.8.22)

Published 2023-09-01. Last modified 2026-06-17.