CVE-2026-45117 | MyBB up to 1.8.39 Installer install/index.php addcslashes characters code injection

August 18, 2026 Yanac

A vulnerability was found in MyBB up to 1.8.39 and classified as critical. The impacted element is the function addcslashes of the file install/index.php of the component Installer Module. The manipulation of the argument characters results in code injection.

This vulnerability is cataloged as CVE-2026-45117. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More