CVE-2026-45116 | MyBB up to 1.8.39 User Data user.php verify_profile_fields code injection

August 18, 2026 Yanac

A vulnerability labeled as problematic has been found in MyBB up to 1.8.39. This affects the function UserDataHandler::verify_profile_fields of the file inc/datahandlers/user.php of the component User Data Handler. The manipulation of the argument profile_fields results in code injection.

This vulnerability is known as CVE-2026-45116. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More