Back to the CVE list
CVE-2026-61511Proof of concept (PoC) published · CISASuited to automated attack · CISA

vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php

CVSS score

9.3

EPSS probability

%5.6

Risk score

0.5

Published

2 mo ago

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

The Hacker News03.08.2026

⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks

This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more than intended. Some of it was clever. Most of it was just access left lying around: old bugs, exposed gear, poisoned dependencies, weak defaults, and tooling that moved from

Security.NL29.07.2026

Kritiek lek in forumsoftware vBulletin maakt remote code execution mogelijk

Een kritieke kwetsbaarheid in forumsoftware vBulletin maakt remote code execution door ongeauthenticeerde aanvallers mogelijk. ...

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-61511"