CVE-2021-26633: Maxb Maxboard

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL injection and Local File Inclusion (LFI) vulnerabilities in MaxBoard can cause information leakage and privilege escalation. This vulnerabilities can be exploited by manipulating a variable with a desired value and inserting and arbitrary file.

Affected products

• Maxb Maxboard: before 1.9.4 (fixed in 1.9.4)

Published 2022-06-02. Last modified 2026-06-17.