HomeAI · summaries
Storia in 3 fonti
vBulletin CVE-2026-61511: Unauthenticated RCE via Public AJAX Template to `eval()`
vBulletin CVE-2026-61511: Unauthenticated RCE via Public AJAX Template to eval() ...
Confronto fonti
3 prospettive sulla stessa storiaTimeline cronologica
- ·
thehackernews.com
Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
Public exploit details show how CVE-2026-61511 reaches PHP eval() in unpatched vBulletin forums through a visitor-controlled template value.
- ·
bleepingcomputer.com
vBulletin fixes critical pre-auth RCE flaw with public exploit
A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering.
