> TritonInfoSec News
Home / Jul 28, 2026 / Story
0
#9 The Hacker News general July 27, 2026 at 14:40 UTC

Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

By [email protected] (The Hacker News)

AI Summary

A public exploit was released on July 27 demonstrating how an unauthenticated HTTP request can reach PHP's eval() function in vBulletin versions 6.2.1 and earlier and 6.1.6 and earlier, enabling pre-authentication remote code execution with no user interaction required. Forum administrators on unpatched vBulletin instances are at immediate risk given the public availability of working exploit code.

Read full article → https://thehackernews.com/2026/07/public-exploit-r…

Relevance score: 78.0/100

# More from July 28

  1. 1
    Coca-Cola confirms data theft in Fairlife ransomware attack BleepingComputer
  2. 2
    Ernst & Young data breach claimed by ShinyHunters extortion gang BleepingComputer
  3. 3
    Arista patches VeloCloud Orchestrator zero-day exploited in attacks BleepingComputer
  4. 4
    DentaQuest Data Breach Potentially Impacts Over 23 Million People SecurityWeek
  5. 5
    New Certighost PoC exploit lets attackers hijack Windows domains BleepingComputer
  6. 6
    Hackers target US firms in FastJson RCE zero-day attacks BleepingComputer
  7. 7
    AI Agent Drives Espionage Attack on Thai Ministry of Finance Dark Reading
  8. 8
    PTC Windchill Vulnerability Exploited in Ransomware Campaign SecurityWeek
  9. 10
    Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials SecurityWeek