Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw CVE-2026-61511
A public exploit has been released for a pre-authentication remote code execution vulnerability in vBulletin, tracked as CVE-2026-61511. The flaw resides in…
Tag: template engine
CVE-2026-61511: vBulletin Pre-Auth Remote Code Execution via Template Engine
CVE-2026-61511 is an unauthenticated remote code execution vulnerability in vBulletin's template engine, specifically in the vB5_Template_Runtime::runMaths() method. The flaw allows an attacker…
CVE-2025-48827: vBulletin Template Engine Code Execution
CVE-2025-48827 is a previous vBulletin template engine vulnerability that allowed pre-authentication code execution. It was part of a chain with CVE-2025-48828 and…
CVE-2025-48828: vBulletin Template Engine Code Execution
CVE-2025-48828 is a companion vulnerability to CVE-2025-48827, both affecting vBulletin's template engine and enabling pre-authentication code execution. Exploitation attempts were observed shortly…