SECURITYJul 28 · 18:08 UTCBLEEPING COMPUTERBill Toulas

vBulletin fixes critical pre-auth RCE flaw with public exploit

A critical vulnerability in vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code via template rendering. The flaw has a public exploit available.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

vBulletinorganizationcritical pre-auth RCE flawtopicPHP code executiontopictemplate renderingtopicpublic exploittopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYApr 12 · 14:20 UTC
Critical Marimo pre-auth RCE flaw now under active exploitation
SECURITYJun 12 · 18:19 UTC
phpBB forum fixes auth bypass bug lurking for a decade
SECURITYJul 20 · 21:57 UTC
Attackers pummel critical WordPress vuln to create all sorts of mischief
SECURITYApr 29 · 12:41 UTC
GitHub fixes RCE flaw that gave access to millions of private repos
SECURITYMay 21 · 03:44 UTC
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks