{"uuid": "b1a509bc-1de1-4c34-beef-1d200ce8cfd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://t.me/pphm_HackerNews/2360", "content": "\ud83d\udd34 vBulletin fixes critical pre-auth RCE flaw with public exploit\n\nA critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering.\n\nThe security issue is tracked as CVE-2026-61511 and affects vBulletin versions in the 5.x and 6.x branches up to 5.7.5 and 6.2.1, respectively.\n\nvBulletin is a PHP-based proprietary forum platform released in 2000 and used by large online communities, gaming sites, support portals, automotive forums, tech forums, and discussion boards.", "creation_timestamp": "2026-08-21T23:00:07.418683Z"}