Which versions of UBB.threads are affected by CVE-2026-54222?

UBB.threads forum software versions including 7.7.5 contains an authenticated SQL injection vulnerability allowing administrators with Members section access to extract sensitive database contents…

How to fix or mitigate CVE-2026-54222?

Within 24 hours: Inventory all systems running UBB.threads forum software and confirm which versions are deployed, prioritizing identification of version 7.7.5 installations. Within 7 days: Restrict administrative access to the Control Panel's Members section to essential personnel only; enable database transaction logging and query monitoring for all administrative accounts; audit recent administrator activity logs for suspicious SQL patterns. Within 30 days: Contact UBB.threads vendor for confirmation of patch availability and remediation timeline; evaluate migration to alternative forum platforms; implement database-level access controls using least-privilege principles for administrative accounts.

UBB.threads CVE-2026-54222

Q: What is the CVSS score of CVE-2026-54222?

CVE-2026-54222 has a CVSS 4.0 base score of 8.6 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-37885 HIGH

SQL Injection (CWE-89)

2026-06-18 CERT-PL

GHSA-wqx8-qrc6-2wpv

SQLi Ubb Threads

8.6

CVSS 4.0 · Vendor: CERT-PL

Severity by source

Vendor (CERT-PL) PRIMARY

8.6 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.7 MEDIUM

Network-reachable admin UI (AV:N, AC:L), but Members Control Panel access requires high-privilege authentication (PR:H); blind SQLi yields full DB read/write (C:H/I:H) with limited availability impact (A:L).

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (CERT-PL).

CVSS VectorVendor: CERT-PL

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 18, 2026 - 13:31 vuln.today

DescriptionCVE.org

UBB.threads is vulnerable to Blind SQL Injection, allowing attackers with access to the Members in Control Panel to interact with the underlying database. Due to insufficient input sanitization, an attacker can extract sensitive information, such as user credentials, by manipulating SQL queries through time-based or boolean-based techniques. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 7.7.5 but may also affect other versions.

AnalysisAI

Authenticated blind SQL injection in UBB.threads forum software version 7.7.5 (and likely other versions) allows administrators with access to the Members section of the Control Panel to extract arbitrary database contents, including user credentials, via time-based or boolean-based SQLi techniques. Reported by CERT-PL after unsuccessful vendor contact, with no public exploit identified at time of analysis and no vendor-released patch.

Technical ContextAI

UBB.threads is a long-running PHP-based commercial bulletin board / forum platform developed by UBB Systems (cpe:2.3:a:ubb_systems:ubb.threads). The flaw is a classic CWE-89 Improper Neutralization of Special Elements used in an SQL Command, where user-controllable parameters reaching the Members management feature in the administrative Control Panel are concatenated into SQL statements without adequate sanitization or parameterization. Because the injection is blind, attackers do not see direct query output but infer database contents through response timing (time-based) or response differences (boolean-based) - typical exploitation tools include sqlmap. The affected component is reachable only after authenticating to the Control Panel, meaning the vulnerable code path lives behind the admin-area authorization layer.

RemediationAI

No vendor-released patch identified at time of analysis, since CERT-PL reports vendor contact attempts were unsuccessful; monitor https://www.ubbcentral.com/ and the CERT-PL advisory at https://cert.pl/en/posts/2026/06/CVE-2026-54219 for an updated build beyond 7.7.5. As compensating controls, restrict access to the Control Panel by IP allow-listing the admin URL paths at the web server or reverse proxy (trade-off: admins lose ad-hoc access from arbitrary networks and must use VPN/jump host), audit and minimize the set of accounts granted Members-management privileges to reduce the exploitable population, enforce strong unique passwords plus MFA in front of the admin login (e.g. via a reverse-proxy SSO layer, since UBB.threads itself may not natively support MFA), and deploy a WAF rule set in front of the Members Control Panel pages that blocks classic time-based payloads (SLEEP/BENCHMARK/WAITFOR) and boolean tautologies on those parameters (trade-off: WAF rules can be bypassed by encoding and may generate false positives on legitimate admin search input). Rotate stored credentials and session secrets if there is any indication an admin account has already been used to probe the Members interface.