Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. This CVE was assigned on the basis that the permission system allows a limited administrator to grant privileges exceeding their own authorization scope, potentially constituting an insecure default configuration. Following a dispute, the MITRE TL-Root determined the behavior reflects documented and intended product design rather than a security vulnerability.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-58054 Privilege Escalation in MyBB 1.8.40 via Unrestricted Usergroup Assignment https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-58054
Post summary
The CVE‑2026‑58054 vulnerability enables privilege escalation in MyBB 1.8.40 through unrestricted usergroup assignment; detailed information is hosted on the provided VulMon link.
CVE-2026-58054 (CVSS 8.6): MyBB 1.8.40 allows limited ACP users to assign the full Administrators group. Review and restrict permissions if you run MyBB. https://nvd.nist.gov/vuln/detail/CVE-2… via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/tb8NKAcI0D
Post summary
The tweet announces the CVE-2026-58054 vulnerability in MyBB 1.8.40, provides basic technical details, and advises users to restrict ACP permissions as a workaround.