RT by @TheHackersNews: 🛑 WARNING - Public PoC released for a vBulletin flaw that turns one unauthenticated request into code execution. No login, no click. The request reaches PHP’s eval(). Self-hosted admins should update now. Details: https://thehackernews.com/2026/07/public-exploit-released-for-patched.html

<p>🛑 WARNING - Public PoC released for a vBulletin flaw that turns one unauthenticated request into code execution.<br /> <br /> No login, no click. The request reaches PHP’s eval(). <br /> <br /> Self-hosted admins should update now.<br /> <br /> Details: <a href="https://thehackernews.com/2026/07/public-exploit-released-for-patched.html">thehackernews.com/2026/07/pu…</a></p> <img src="https://nitter.net/pic/media%2FHOPfwaUaEAALZhg.jpg" />