V
Vendor security profile2 actively exploited CVEs
vbulletin
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical1
CISA KEV2
Public exploit4
Patch rate%0
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
0
0
0
CVE KEV
CVE severity distribution
4toplam CVE
Critical1 (25%)
Medium1 (25%)
Uncertain2 (50%)
Patch and exploitation view
%0
Verified patch
%50
CISA KEV
%100
Public exploit
0Patch available
0Partial
2Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
9.3
CVE-2026-61511
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
V
Patch status unknown Public Exploits:1EPSS %6
5.4
CVE-2025-46171
Uncontrolled resource consumption in Vbulletin
V
Patch status unknown Public Exploits:1EPSS %0
-
CVE-2019-16759 Actively exploited
vBulletin PHP Module Remote Code Execution Vulnerability
V
Workaround Public Exploits:3EPSS %100
-
CVE-2020-17496 Actively exploited
vBulletin PHP Module Remote Code Execution Vulnerability
V
Workaround Public Exploits:3EPSS %87