CVE-2026-45123

MyBB (open-source forum software) versions prior to 1.8.40 are affected by a server-side request forgery (SSRF) vulnerability in the remote requests feature. The root cause is a fail-open verification in fetch_remote_file() within inc/functions.php: the function get_ip_by_hostname() does not retu...