CVE-2026-54224 describes a high-severity vulnerability in UBB Systems' UBB.threads software, specifically version 7.7.5. The issue is an asymmetric resource consumption (amplification) vulnerability categorized under CWE-405. An authenticated attacker can perform a denial of service by sending multiple concurrent requests to view user profiles on instances with many registered users, which exhausts database resources and disrupts service availability for legitimate users. The vulnerability is confirmed in version 7.7.5, with no official fix or remediation level published. Attempts to contact the vendor for a fix have been unsuccessful.

The vulnerability allows an authenticated attacker to cause a denial of service by exhausting database resources through concurrent profile view requests. This results in complete denial of access to the application for other users, impacting availability. There is no indication of data confidentiality or integrity being affected. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is available and vendor contact attempts have failed, users should monitor for vendor updates. In the meantime, restricting authenticated user capabilities or implementing rate limiting on profile view requests may help mitigate the risk.