Skip to content
OpenAdvisories

Vendor

vBulletin

3 known vulnerabilities.

Products

vBulletin 3 Connect < 5.7.0 RC 2 0 Connect 0 Connect <= 6.0.0 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-61511 Public exploit Scanner template

    vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php

    vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code by supplying craft…

    vBulletin vBulletin
  • Critical 9.0
    CVE-2025-48828 Public exploit Scanner template EPSS 57%

    Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the …

    vBulletin vBulletin
  • Critical 10.0
    CVE-2025-48827 Public exploit Scanner template EPSS 76%

    vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers'…

    vBulletin vBulletin