SecurityBleepingComputerabout 2 hours ago
vBulletin Pre-Auth RCE Exploit Goes Public
1 min read
A critical unauthenticated remote code execution vulnerability in vBulletin, tracked as CVE-2026-61511, allows attackers to execute arbitrary PHP code via the template engine's runMaths function. The flaw affects versions up to 5.7.5 and 6.2.1. vBulletin released version 6.2.2 on July 1, 2026, and backported patches for 6.2.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
