5 matches found
CVE-2026-58054
creationtimestamp| type| source ---|---|--- 2026-06-28 05:25:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpdacxvisr2t 2026-06-29 14:53:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgqjdouzw2r 2026-06-29 14:53:25+00:00| seen|...
CVE-2026-58054
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. This CVE was assigned on the basis that the permission system allows a limited administrator to grant privileges exceeding their own authorization scope, potentially constituting an insecure default...
CVE-2026-58054
CVE-2026-58054 is not a public vulnerability in practice; however, connected details describe a concrete issue in MyBB 1.8.40 where a limited ACP user can assign the Administrators (gid 4) group because verify_usergroup() unconditionally returns true for that group. This enables privilege escalat...
