#vbulletin


vBulletin fixes critical pre-auth RCE flaw with public exploit

Jul 28, 2026 // 23:37

A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering. The security issue is tracked as […]

Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

Jul 27, 2026 // 17:40

Public exploit details released on July 27 show how an unauthenticated request can reach PHP’s eval() function inside vBulletin and execute code on an unpatched […]