What’s Vulnerable › Products

mlogclub bbs-go vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your mlogclub bbs-go version is affected

Latest mlogclub bbs-go vulnerabilities

• CVE-2026-111639 — bbs-go through 4.4.6 Account Takeover via Google One Tap Login (CVSS 8.1)
• CVE-2026-110103 — bbs-go through 4.4.6 Stored XSS via Image Upload Content-Type (CVSS 5.4)
• CVE-2026-103396 — bbs-go through 4.4.6 Incorrect Authorization via /api/admin/user/synccount (CVSS 4.3)