MyBB Limited ACP to Full Admin Privilege Escalation (mybb-limited-acp-to-admin)

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•4

This rule detects HTTP POST requests to a MyBB forum administrative panel targeting the 'user-users' module, specifically attempting to assign a user to the 'Administrator' group (group ID 4). This pattern is indicative of an exploitation attempt or unauthorized administrative account manipulation.