vBulletin CVE-2026-61511: Unauthenticated RCE via Public AJAX Template to eval()

1. Basic Information

Article Title: vBulletin fixes critical pre-auth RCE flaw with public exploit

Publisher: BleepingComputer

Publication Date: July 28, 2026