MyBB Limited ACP Privilege Escalation to Full Administrator (mybb-limited-acp-to-admin)

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•2

Detects potential privilege escalation attempts against a MyBB forum by monitoring POST requests to administrative endpoints. Specifically, it flags session activity that includes creating new users with admin group assignments (usergroup=4) or accessing sensitive administrative modules (config, tools, style, user) from within the admin control panel.