PT-2026-77185

MyBB is free and open source forum software. Prior to 1.8.40, the User CP Buddy/Ignore List component does not validate reciprocal buddy-list updates correctly. The usercp.php?action=do editlists delete handler removes the selected entry from the acting user's list and then updates mybb...

vBulletin security vulnerabilities

vBulletin is an open source web forum program based on PHP and MySQL from vBulletin, Inc. in the United States. A security vulnerability exists in vBulletin version 3.8.7, which stems from improper handling of the misc.php?do=buddylist endpoint, which could lead to a denial of service attack...

CVE-2025-46171: Uncontrolled Resource Consumption

vBulletin 3.8.7 is vulnerable to a denial-of-service condition via the misc.php?do=buddylist endpoint. If an authenticated user has a sufficiently large buddy list, processing the list can consume excessive memory, exhausting system resources and crashing the forum...

CVE-2025-46171

vBulletin 3.8.7 is vulnerable to a denial-of-service condition via the misc.php?do=buddylist endpoint. If an authenticated user has a sufficiently large buddy list, processing the list can consume excessive memory, exhausting system resources and crashing the forum...