vBulletin vulnerabilities
3 published CVEs name vBulletin among the affected products.
- Published CVEs
- 3
- Last 12 months
- 1
- Critical
- 3
- Known exploited
- 0
Critical 3High 0Medium 0Low 0Not scored 0
CVEs per yearBy the year they were published
- 20252
- 20261
Newest CVEs
- CVE-2026-61511
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
vBulletin · vBulletin
Critical9.3 - CVE-2025-48828
Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template…
vBulletin · vBulletin
Critical9.0 - CVE-2025-48827
vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or…
vBulletin · vBulletin
Critical10.0