vBulletin - Geek Feed

vBulletin fixes critical pre-auth RCE flaw with public exploit

August 1, 2026August 1, 2026 geekfeed0Tagged CVE-2026-61511, exploit, Forum, poc, Proof of Concept, rce, Remote Code Execution, vBulletin, vulnerability

A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering. The security issue is tracked as CVE-2026-61511 and affects vBulletin versions in the 5.x and 6.x branches up to 5.7.5 and 6.2.1, respectively. vBulletin is a PHP-based proprietary forum platform released in 2000 and used by large online […]

2 mins read

Hackers are exploiting critical flaw in vBulletin forum software

June 2, 2025June 2, 2025 geekfeed0Tagged Actively Exploited, CVE-2025-48827, CVE-2025-48828, Forum, Forums, rce, Remote Code Execution, vBulletin, vulnerability

Two critical vulnerabilities affecting the open-source forum software vBulletin have been discovered, with one confirmed to be actively exploited in the wild. The flaws, tracked under CVE-2025-48827 and CVE-2025-48828, and rated critical (CVSS v3 score: 10.0 and 9.0 respectively), are an API method invocation and a remote code execution (RCE) via template engine abuse flaws. They impact vBulletin […]

2 mins read