vBulletin vulnerabilities
3 published CVEs name vBulletin among the affected products.
- 3Published CVEs3 of them scored
- 1Last 12 monthspublished in the last year
- 3Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-61511
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
vBulletin · vBulletin
Critical9.3 - CVE-2025-48828
Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template…
vBulletin · vBulletin
Critical9.0 - CVE-2025-48827
vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or…
vBulletin · vBulletin
Critical10.0