Known Vulnerabilities for Ban List by Mybb
Listed below are 1 of the newest known vulnerabilities associated with "Ban List" by "Mybb".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-129164 json | Dromara free-fs 2.0.1 through 2.3.1 contains an authorization bypass vulnerability that allows attackers to access code-prote... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-128328 json | Dokploy 0.28.0 before 0.31.1 contains a path traversal vulnerability that allows authenticated organization members to list t... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-128028 json | OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting vulnerability... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-127928 json | In MCUboot's serial-recovery encrypted-image support (boot/boot_serial/src/boot_serial_encryption.c), decrypt_image_inplace()... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-127916 json | bootutil_img_hash() computes the image digest over ih_hdr_size + ih_img_size + ih_protect_tlv_size bytes, all three taken fro... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-127109 json | A code injection vulnerability in promzard’s template-loading functionality allows an attacker who can control property nam... | Not Provided | 2026-11-12 | 2026-11-12 |
| CVE-2026-127102 json | In Eclipse BaSyx Go Components versions up to and including 1.1.2, ABAC-enabled deployments of the Submodel Repository and th... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-127080 json | OpsTree BuildPiper before 2.7.0 contains an improper authorization vulnerability that allows authenticated deploy users to de... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-127076 json | OpsTree BuildPiper before 2.7.0 contains a broken access control vulnerability that allows authenticated users to list and bu... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-127046 json | The MISP Modules website component contains an information disclosure vulnerability in the external tools management interfac... | Not Provided | 2026-11-12 | 2026-11-12 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mybb | Ban List | 1.0 |