Vulnerabilities

vBulletin patches critical pre-auth RCE vulnerability

July 28, 2026 1 min read 5 views
cybersecurity malware news
A critical RCE flaw in vBulletin versions 5.x and 6.x allows unauthenticated attackers to execute arbitrary PHP code. A public proof-of-concept exploit is available, increasing the risk of exploitation.

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.