<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 27 Jul 2026 21:46:51 +0000</lastBuildDate>
    <item>
      <title>347eaf9f-5951-47ac-b053-405fd88fe8f1</title>
      <link>https://vulnerability.circl.lu/sighting/347eaf9f-5951-47ac-b053-405fd88fe8f1/export</link>
      <description>{"uuid": "347eaf9f-5951-47ac-b053-405fd88fe8f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mrnmndolqdl2", "content": "PoC for CVE-2026-61511, unauthenticated vBulletin RCE https://ssd-disclosure.com/vbulletin-runtime-template-runmaths-preauth-rce/", "creation_timestamp": "2026-07-27T19:23:07.477895Z"}</description>
      <content:encoded>{"uuid": "347eaf9f-5951-47ac-b053-405fd88fe8f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mrnmndolqdl2", "content": "PoC for CVE-2026-61511, unauthenticated vBulletin RCE https://ssd-disclosure.com/vbulletin-runtime-template-runmaths-preauth-rce/", "creation_timestamp": "2026-07-27T19:23:07.477895Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/347eaf9f-5951-47ac-b053-405fd88fe8f1/export</guid>
      <pubDate>Mon, 27 Jul 2026 19:23:07 +0000</pubDate>
    </item>
    <item>
      <title>35ab6e85-0bfe-4d65-bd43-7dc19968030a</title>
      <link>https://vulnerability.circl.lu/sighting/35ab6e85-0bfe-4d65-bd43-7dc19968030a/export</link>
      <description>{"uuid": "35ab6e85-0bfe-4d65-bd43-7dc19968030a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrneobzkb72m", "content": "Public exploit details for CVE-2026-61511 show an unauthenticated RCE in vBulletin's template engine, reaching PHP eval() via vB5_Template_Runtime::runMaths(). Affects unpatched forums. #vBulletin #CVE-2026-61511 #PHP", "creation_timestamp": "2026-07-27T17:00:24.850611Z"}</description>
      <content:encoded>{"uuid": "35ab6e85-0bfe-4d65-bd43-7dc19968030a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrneobzkb72m", "content": "Public exploit details for CVE-2026-61511 show an unauthenticated RCE in vBulletin's template engine, reaching PHP eval() via vB5_Template_Runtime::runMaths(). Affects unpatched forums. #vBulletin #CVE-2026-61511 #PHP", "creation_timestamp": "2026-07-27T17:00:24.850611Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/35ab6e85-0bfe-4d65-bd43-7dc19968030a/export</guid>
      <pubDate>Mon, 27 Jul 2026 17:00:24 +0000</pubDate>
    </item>
    <item>
      <title>452a4b07-8695-46f1-aaea-9e9e855e0c47</title>
      <link>https://vulnerability.circl.lu/sighting/452a4b07-8695-46f1-aaea-9e9e855e0c47/export</link>
      <description>{"uuid": "452a4b07-8695-46f1-aaea-9e9e855e0c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrn3lxmyr62z", "content": "\u26a0\ufe0f PATCH NOW\n\nvBulletin has a critical flaw (CVE-2026-61511) that lets anyone run code on the forum server with no login.\n\nPatched in 6.2.2, but the exploit went public today, so unpatched forums are exposed now.\n\nIf you run vBulletin, update to 6.2.2.", "creation_timestamp": "2026-07-27T14:18:03.325285Z"}</description>
      <content:encoded>{"uuid": "452a4b07-8695-46f1-aaea-9e9e855e0c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrn3lxmyr62z", "content": "\u26a0\ufe0f PATCH NOW\n\nvBulletin has a critical flaw (CVE-2026-61511) that lets anyone run code on the forum server with no login.\n\nPatched in 6.2.2, but the exploit went public today, so unpatched forums are exposed now.\n\nIf you run vBulletin, update to 6.2.2.", "creation_timestamp": "2026-07-27T14:18:03.325285Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/452a4b07-8695-46f1-aaea-9e9e855e0c47/export</guid>
      <pubDate>Mon, 27 Jul 2026 14:18:03 +0000</pubDate>
    </item>
    <item>
      <title>4cfffc94-61d2-46c2-98e2-0fc333bba0f6</title>
      <link>https://vulnerability.circl.lu/sighting/4cfffc94-61d2-46c2-98e2-0fc333bba0f6/export</link>
      <description>{"uuid": "4cfffc94-61d2-46c2-98e2-0fc333bba0f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrn2szkn2t2r", "content": "CVE-2026-61511 - vbulletin\nUnauthenticated attackers can inject and execute arbitrary PHP code through vBulletin's template system, potentially leading to unauthorized access and data manipulation. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vbulletin #CVE #infosec", "creation_timestamp": "2026-07-27T14:04:06.018918Z"}</description>
      <content:encoded>{"uuid": "4cfffc94-61d2-46c2-98e2-0fc333bba0f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrn2szkn2t2r", "content": "CVE-2026-61511 - vbulletin\nUnauthenticated attackers can inject and execute arbitrary PHP code through vBulletin's template system, potentially leading to unauthorized access and data manipulation. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vbulletin #CVE #infosec", "creation_timestamp": "2026-07-27T14:04:06.018918Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4cfffc94-61d2-46c2-98e2-0fc333bba0f6/export</guid>
      <pubDate>Mon, 27 Jul 2026 14:04:06 +0000</pubDate>
    </item>
    <item>
      <title>506b7dc7-cb1d-40d2-b137-0ce3076688df</title>
      <link>https://vulnerability.circl.lu/sighting/506b7dc7-cb1d-40d2-b137-0ce3076688df/export</link>
      <description>{"uuid": "506b7dc7-cb1d-40d2-b137-0ce3076688df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrmhnqg6ev2e", "content": "A public PoC now targets CVE-2026-61511, a vBulletin preauth RCE via runMaths eval. Patch to vBulletin 6.2.2 to block remote code execution.\n\n#vBulletin #CVE202661511 #RCE #PreauthRCE #RemoteCodeExecution #PoC #WebSecurity #Cybersecurity", "creation_timestamp": "2026-07-27T08:21:08.086620Z"}</description>
      <content:encoded>{"uuid": "506b7dc7-cb1d-40d2-b137-0ce3076688df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrmhnqg6ev2e", "content": "A public PoC now targets CVE-2026-61511, a vBulletin preauth RCE via runMaths eval. Patch to vBulletin 6.2.2 to block remote code execution.\n\n#vBulletin #CVE202661511 #RCE #PreauthRCE #RemoteCodeExecution #PoC #WebSecurity #Cybersecurity", "creation_timestamp": "2026-07-27T08:21:08.086620Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/506b7dc7-cb1d-40d2-b137-0ce3076688df/export</guid>
      <pubDate>Mon, 27 Jul 2026 08:21:08 +0000</pubDate>
    </item>
  </channel>
</rss>
