{"vulnerability": "CVE-2026-61511", "sightings": [{"uuid": "831ba322-d99f-4ca2-b4c4-9e11f8966835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "published-proof-of-concept", "source": "Telegram/QB-KsUWLzXJwQwzu3y3h7EaFYqjJqeuIVoOZ7qIyJEvvfRQ", "content": "", "creation_timestamp": "2026-07-30T00:03:15.956230Z"}, {"uuid": "d4046a74-5e47-43a9-b192-a1be0962bc0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "published-proof-of-concept", "source": "Telegram/icfrk9NJ0r9US8j4ZgZwjdU3nJ-xiydIySZk2Z3ro5QcgAo", "content": "", "creation_timestamp": "2026-07-30T00:03:16.071022Z"}, {"uuid": "66303b83-0334-4ed9-b504-0d2e02ac534b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95609", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Ultimate-CVE-2026-61511\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 00:52:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nvBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T00:03:18.719936Z"}, {"uuid": "9b8104d8-fc93-45b1-8ccd-71239d0b720e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "published-proof-of-concept", "source": "Telegram/Ig8EiCACgPrEXQ5i-DIyVp_2gol1J9_WigCZpGPavBW5BRY", "content": "", "creation_timestamp": "2026-07-30T01:00:07.868431Z"}, {"uuid": "506b7dc7-cb1d-40d2-b137-0ce3076688df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrmhnqg6ev2e", "content": "A public PoC now targets CVE-2026-61511, a vBulletin preauth RCE via runMaths eval. Patch to vBulletin 6.2.2 to block remote code execution.\n\n#vBulletin #CVE202661511 #RCE #PreauthRCE #RemoteCodeExecution #PoC #WebSecurity #Cybersecurity", "creation_timestamp": "2026-07-27T08:21:08.086620Z"}, {"uuid": "96cc4e60-262f-4057-80bf-f45632e8227c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "Telegram/IvSYhiVE7XGa5Xwo6T17oAU9D2-w0Ja8vTl5CzGS7UbcY5M", "content": "", "creation_timestamp": "2026-07-28T05:00:03.785687Z"}, {"uuid": "4cfffc94-61d2-46c2-98e2-0fc333bba0f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrn2szkn2t2r", "content": "CVE-2026-61511 - vbulletin\nUnauthenticated attackers can inject and execute arbitrary PHP code through vBulletin's template system, potentially leading to unauthorized access and data manipulation. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vbulletin #CVE #infosec", "creation_timestamp": "2026-07-27T14:04:06.018918Z"}, {"uuid": "452a4b07-8695-46f1-aaea-9e9e855e0c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrn3lxmyr62z", "content": "\u26a0\ufe0f PATCH NOW\n\nvBulletin has a critical flaw (CVE-2026-61511) that lets anyone run code on the forum server with no login.\n\nPatched in 6.2.2, but the exploit went public today, so unpatched forums are exposed now.\n\nIf you run vBulletin, update to 6.2.2.", "creation_timestamp": "2026-07-27T14:18:03.325285Z"}, {"uuid": "35ab6e85-0bfe-4d65-bd43-7dc19968030a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrneobzkb72m", "content": "Public exploit details for CVE-2026-61511 show an unauthenticated RCE in vBulletin's template engine, reaching PHP eval() via vB5_Template_Runtime::runMaths(). Affects unpatched forums. #vBulletin #CVE-2026-61511 #PHP", "creation_timestamp": "2026-07-27T17:00:24.850611Z"}, {"uuid": "347eaf9f-5951-47ac-b053-405fd88fe8f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mrnmndolqdl2", "content": "PoC for CVE-2026-61511, unauthenticated vBulletin RCE https://ssd-disclosure.com/vbulletin-runtime-template-runmaths-preauth-rce/", "creation_timestamp": "2026-07-27T19:23:07.477895Z"}, {"uuid": "165633e9-ca13-4465-9b05-f91d8d2278a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "Telegram/TTDc5m9rjxOF-FLNkY4srXBXmccnJEZ8Ua1WlC6sUt3lKgo", "content": "", "creation_timestamp": "2026-07-28T14:00:04.917718Z"}, {"uuid": "b93f2a89-cc06-4921-8eb8-a7329cd7882d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrq4bqalu22o", "content": "\ud83e\udd16 CVE-2026-61511: Critical pre-auth RCE in vBulletin with public exploit. Unauthenticated attackers execute arbitrary PHP code via template rendering. Patch available.\n\nhttps://www.bleepingcomputer.com/news/security/vbulletin-fixes-critical-pre-auth-rce-flaw-with-public-exploit/", "creation_timestamp": "2026-07-28T19:08:12.444858Z"}, {"uuid": "64a8fb0e-bfbe-4b0f-a6c0-07cf56ac6e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrq6e76lic23", "content": "vBulletin patched CVE-2026-61511, a critical pre-auth RCE flaw that could let unauthenticated attackers run arbitrary PHP via template rendering. A public exploit exists; versions up to 5.7.5 and 6.2.1 are affected. #vBulletin #RCE #PHP", "creation_timestamp": "2026-07-28T19:45:23.726626Z"}, {"uuid": "c8412e14-7f80-41ba-81d9-55dd932b78ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "Telegram/yRjHjV7EIJtudScJ7xrji7ti9dF3Loko14oGa2A8AjjpSbY", "content": "", "creation_timestamp": "2026-07-28T20:00:07.506708Z"}, {"uuid": "474b71b5-6de7-454a-b516-f1015b04e636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "Telegram/h1j6Jl6m2npLlEniyRpMllHKNmi9d2U9i1x7gM3I-76diKo", "content": "", "creation_timestamp": "2026-07-28T20:00:07.922006Z"}, {"uuid": "bd2f48b0-ca65-4e4f-aff4-2b49ffc593fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mrq7wtygp32e", "content": "Heads up, vBulletin admins! A critical pre-auth RCE (CVE-2026-61511) with a public exploit is actively compromising outdated forums. This recurring template engine flaw demands urgent patching or migration to secure your site.\n\nhttps://www.tpp.blog/273mxus\n\n#cybersecurity #vbulletin #cve202661511", "creation_timestamp": "2026-07-28T20:13:43.462967Z"}, {"uuid": "a0726a17-cc13-4862-8c64-65568aa74f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mrqeji6wx22g", "content": "vBulletin\u306b\u8a8d\u8a3c\u4e0d\u8981\u306eRCE \u8106\u5f31\u6027 CVE-2026-61511\u3001\u516c\u958bPoC\u3042\u308a\u30676.2.2\u3078\u306e\u66f4\u65b0\u3092\u63a8\u5968\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u8106\u5f31\u6027", "creation_timestamp": "2026-07-28T21:35:45.593794Z"}, {"uuid": "f7df8e45-44b3-45af-bea9-426c23fda69f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "published-proof-of-concept", "source": "Telegram/yRjHjV7EIJtudScJ7xrji7ti9dF3Loko14oGa2A8AjjpSbY", "content": "", "creation_timestamp": "2026-07-29T00:00:26.916588Z"}, {"uuid": "fbc4fe89-0d7a-40c8-b61a-c9d0dfbc7471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "published-proof-of-concept", "source": "Telegram/h1j6Jl6m2npLlEniyRpMllHKNmi9d2U9i1x7gM3I-76diKo", "content": "", "creation_timestamp": "2026-07-29T00:00:26.703678Z"}, {"uuid": "98cdda43-9944-42a9-ab6c-8da08a9824e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "published-proof-of-concept", "source": "Telegram/TTDc5m9rjxOF-FLNkY4srXBXmccnJEZ8Ua1WlC6sUt3lKgo", "content": "", "creation_timestamp": "2026-07-29T00:00:34.268112Z"}, {"uuid": "19d90faf-d7c6-45d1-b581-e5a24de1292d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "published-proof-of-concept", "source": "Telegram/IvSYhiVE7XGa5Xwo6T17oAU9D2-w0Ja8vTl5CzGS7UbcY5M", "content": "", "creation_timestamp": "2026-07-29T00:00:46.763002Z"}, {"uuid": "31e13256-e6f7-449d-ae0b-6a6f3e2ace9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://t.me/GithubRedTeam/95609", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Ultimate-CVE-2026-61511\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 00:52:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nvBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-29T02:00:03.865608Z"}, {"uuid": "e935d4e2-0e09-4080-9d31-884333b8881b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "Telegram/icfrk9NJ0r9US8j4ZgZwjdU3nJ-xiydIySZk2Z3ro5QcgAo", "content": "", "creation_timestamp": "2026-07-29T04:00:04.999799Z"}, {"uuid": "1bd0ab24-e7cd-4691-9aa0-0cc5e092b6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "Telegram/QB-KsUWLzXJwQwzu3y3h7EaFYqjJqeuIVoOZ7qIyJEvvfRQ", "content": "", "creation_timestamp": "2026-07-29T04:00:05.032472Z"}, {"uuid": "7b764e1b-c449-4f15-9a04-7069cd15d652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://t.me/GithubRedTeam/95651", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61511\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 08:31:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-61511 \u2013 vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, firewall control, log management, mass scanning. 2 versions: multi-exploit & safe-check. Python 3.8+ Use Ethically, Stay Legal. \ud83d\udd12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-29T11:00:06.090907Z"}, {"uuid": "c37d0b7b-fc16-43ac-922b-840bf4c001cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "Telegram/Ig8EiCACgPrEXQ5i-DIyVp_2gol1J9_WigCZpGPavBW5BRY", "content": "", "creation_timestamp": "2026-07-29T20:00:03.929861Z"}, {"uuid": "24424952-9aaa-4587-939e-a793f0567e07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-29T20:00:03.978307Z"}, {"uuid": "58f74310-0b3a-455d-991e-740d6ea37b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "content": "", "creation_timestamp": "2026-07-29T13:00:06.214066Z"}, {"uuid": "898af779-8731-40fe-90d1-3a0afd363a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://t.me/GithubRedTeam/95675", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61511-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 3  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 10:21:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-61511 \u2013 vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, firewall control, log management, mass scanning. 2 versions: multi-exploit & safe-check. Python 3.8+ Use Ethically, Stay Legal. \ud83d\udd12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-29T13:00:06.306525Z"}, {"uuid": "003bdfc6-6669-40f0-9a7d-909a1dfcda9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://t.me/GithubRedTeam/95684", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61511-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a webshellseo8\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 12:40:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-29T15:00:04.205783Z"}, {"uuid": "c5b69929-0b0a-4d7d-92a8-858ecff0122d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrs734spyc2g", "content": "A critical vBulletin pre-auth RCE vulnerability, CVE-2026-61511, threatens unpatched forums. Learn how attackers exploit template math evaluation.\n\n#vBulletin #CVE202661511 #RCE #Cybersecurity #Infosec", "creation_timestamp": "2026-07-29T15:03:32.203934Z"}, {"uuid": "1ea673a2-ae0c-488e-8252-651a44813713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61511", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mrsflxnyq32h", "content": "\ud83d\udce2 RCE non authentifi\u00e9e dans vBulletin \u2264 6.2.1 via la m\u00e9thode runMaths() (CVE-2026-61511)\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nPubli\u00e9 le 27 juillet 2026 sur le blog de r\u2026\nhttps://cyberveille.ch/posts/2026-07-29-rce-non-authentifiee-dans-vbulletin-6-2-1-via-la-methode-runmaths-cve-2026-61511/ #CVE_2026_61511 #Cyberveille", "creation_timestamp": "2026-07-29T17:00:19.362520Z"}, {"uuid": "e7ea58b7-93e6-4e79-b809-a4b5c4e1564c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61511", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrsmoohwmd2m", "content": "\ud83d\udccc Critical vBulletin Vulnerability CVE-2026-61511 Allows Remote Code Execution https://www.cyberhub.blog/article/29904-critical-vbulletin-vulnerability-cve-2026-61511-allows-remote-code-execution", "creation_timestamp": "2026-07-29T19:07:07.089732Z"}, {"uuid": "e9e58056-2eff-4608-98e4-42e93d01f962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "published-proof-of-concept", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "content": "", "creation_timestamp": "2026-07-30T00:00:29.448825Z"}, {"uuid": "74bd7140-8963-4b0d-94d3-efc849863a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "published-proof-of-concept", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-30T00:00:09.846384Z"}, {"uuid": "dba228a5-54f1-41ca-ab8b-6500567dc6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95684", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61511-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a webshellseo8\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 12:40:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T00:00:28.053879Z"}, {"uuid": "d1abbe48-9fbb-4b32-9daf-200325b431e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95675", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61511-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 3  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 10:21:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-61511 \u2013 vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, firewall control, log management, mass scanning. 2 versions: multi-exploit & safe-check. Python 3.8+ Use Ethically, Stay Legal. \ud83d\udd12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T00:00:28.933372Z"}, {"uuid": "fae10a3a-ef19-4144-90db-2d3927bf0ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61511", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95651", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61511\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 08:31:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-61511 \u2013 vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, firewall control, log management, mass scanning. 2 versions: multi-exploit & safe-check. Python 3.8+ Use Ethically, Stay Legal. \ud83d\udd12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T00:02:05.993429Z"}]}