References https://vuldb.com/?id.318680 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-8551 https://github.com/atjiu/pybbs/issues/204 https://jamesbrine.com.au/cnnvd-202508-325-information/ https://github.com/advisories/GHSA-rw5x-6jxr-g2jc https://www.redpacketsecurity.com/cve_alert_cve-2025-8551/ https://app.opencve.io/cve/?vendor=pybbs_project&product=pybbs https://vi.strobes.co/cve/CVE-2025-8551
Related VulnerabilitiesPoCCVE-2026-49060: Hippoo Mobile App for WooCommerce - Broken Access ControlPoCCVE-2026-58467: Cockpit CMS <= 2.14.0 - Path Traversal / Local File InclusionPoCCVE-2026-6639: AI Copilot Content Generator <=1.4.6 - Unauthenticated Task Data ExposurePoCCVE-2026-80099: Newfold WordPress Plugins - Unauthenticated Admin Bypass via Empty HMAC SecretPoCCVE-2026-13153: Essential Blocks < 6.4.0 - Information DisclosurePoCCVE-2026-1340: Ivanti EPMM < 12.8.0.0 - Remote Code ExecutionPoCCVE-2026-42018: JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth BypassPoCCVE-2026-55549: Yamcs <=5.8.6 - Cross-Site ScriptingPoCCVE-2026-69085: SiYuan <=3.7.2 - SQL InjectionPoCCVE-2026-82456: argocd-mcp 0.8.0 - Unauthenticated MCP Session and Tool AccessPoCCVE-2026-84434: WordPress Gravity Forms Plugin <=3.1.0.4 - Unauthenticated Arbitrary File UploadPoCCVE-2026-85688: TEN Framework - Arbitrary File Read & WritePoCCVE-2026-86218: N-able N-central <2026.3.1.14 - Pre-Authentication Remote Code Execution