vbulletin-security - Sn1perSecurity https://sn1persecurity.com/wordpress Get an attacker's view of your organization with our all-in-one offensive security platform Fri, 31 Jul 2026 19:54:35 +0000 en-US hourly 1 https://sn1persecurity.com/wordpress/wp-content/uploads/2023/03/favoriteiconsniper.png vbulletin-security - Sn1perSecurity https://sn1persecurity.com/wordpress 32 32 197797428 CVE-2026-61511: Pre-Auth Remote Code Execution in vBulletin (runMaths) – Advisory + Nuclei Detection https://sn1persecurity.com/wordpress/cve-2026-61511-vbulletin-preauth-rce-detection-with-sn1per/?utm_source=rss&utm_medium=rss&utm_campaign=cve-2026-61511-vbulletin-preauth-rce-detection-with-sn1per Fri, 31 Jul 2026 19:54:35 +0000 https://sn1persecurity.com/wordpress/cve-2026-61511-vbulletin-preauth-rce-detection-with-sn1per/ CVE-2026-61511 is a critical unauthenticated RCE in vBulletin 5.x and 6.x, caused by eval injection in the runMaths() template handler. A plain-English advisory, a tested non-destructive Nuclei detection template, the 6.x patch-level trap that hides unpatched hosts, and how to find vulnerable vBulletin at scale with Sn1per.

The post CVE-2026-61511: Pre-Auth Remote Code Execution in vBulletin (runMaths) – Advisory + Nuclei Detection first appeared on Sn1perSecurity.

]]> 65542