MyBB Limited ACP Account Privilege Escalation to Full Administrator

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•1

Detects unauthorized attempts by a non-super-administrator user within the MyBB Admin Control Panel to assign the administrator group (usergroup=4) to a new or existing user, exploiting a privilege boundary bypass.