Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
Public exploit details released on July 27 show an unauthenticated request reaching PHP's eval() function in vBulletin's template engine, tracked as CVE-2026-61511, affecting versions 6.2.1 and earlier and 6.1.6 and earlier. vBulletin patched those...