vulnerability · Tue 28 Jul 2026 · 18:08 UTC
vBulletin fixes critical pre-auth RCE flaw with public exploit
Filed UTCSource BLC ↗
A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering.
Get the next one first.
Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.