https://vulnerability.circl.lu/sightings/feed 2026-07-27T21:46:51.980240+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/347eaf9f-5951-47ac-b053-405fd88fe8f1/export 2026-07-27T21:46:52.001123+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "347eaf9f-5951-47ac-b053-405fd88fe8f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mrnmndolqdl2", "content": "PoC for CVE-2026-61511, unauthenticated vBulletin RCE https://ssd-disclosure.com/vbulletin-runtime-template-runmaths-preauth-rce/", "creation_timestamp": "2026-07-27T19:23:07.477895Z"} 2026-07-27T19:23:07.477895+00:00 https://vulnerability.circl.lu/sighting/35ab6e85-0bfe-4d65-bd43-7dc19968030a/export 2026-07-27T21:46:52.004232+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "35ab6e85-0bfe-4d65-bd43-7dc19968030a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrneobzkb72m", "content": "Public exploit details for CVE-2026-61511 show an unauthenticated RCE in vBulletin's template engine, reaching PHP eval() via vB5_Template_Runtime::runMaths(). Affects unpatched forums. #vBulletin #CVE-2026-61511 #PHP", "creation_timestamp": "2026-07-27T17:00:24.850611Z"} 2026-07-27T17:00:24.850611+00:00 https://vulnerability.circl.lu/sighting/452a4b07-8695-46f1-aaea-9e9e855e0c47/export 2026-07-27T21:46:52.004379+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "452a4b07-8695-46f1-aaea-9e9e855e0c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrn3lxmyr62z", "content": "\u26a0\ufe0f PATCH NOW\n\nvBulletin has a critical flaw (CVE-2026-61511) that lets anyone run code on the forum server with no login.\n\nPatched in 6.2.2, but the exploit went public today, so unpatched forums are exposed now.\n\nIf you run vBulletin, update to 6.2.2.", "creation_timestamp": "2026-07-27T14:18:03.325285Z"} 2026-07-27T14:18:03.325285+00:00 https://vulnerability.circl.lu/sighting/4cfffc94-61d2-46c2-98e2-0fc333bba0f6/export 2026-07-27T21:46:52.004487+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4cfffc94-61d2-46c2-98e2-0fc333bba0f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrn2szkn2t2r", "content": "CVE-2026-61511 - vbulletin\nUnauthenticated attackers can inject and execute arbitrary PHP code through vBulletin's template system, potentially leading to unauthorized access and data manipulation. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vbulletin #CVE #infosec", "creation_timestamp": "2026-07-27T14:04:06.018918Z"} 2026-07-27T14:04:06.018918+00:00 https://vulnerability.circl.lu/sighting/506b7dc7-cb1d-40d2-b137-0ce3076688df/export 2026-07-27T21:46:52.004596+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "506b7dc7-cb1d-40d2-b137-0ce3076688df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrmhnqg6ev2e", "content": "A public PoC now targets CVE-2026-61511, a vBulletin preauth RCE via runMaths eval. Patch to vBulletin 6.2.2 to block remote code execution.\n\n#vBulletin #CVE202661511 #RCE #PreauthRCE #RemoteCodeExecution #PoC #WebSecurity #Cybersecurity", "creation_timestamp": "2026-07-27T08:21:08.086620Z"} 2026-07-27T08:21:08.086620+00:00