• Alerts
  • Events
  • DCR
    • Explore Cyware Products
    Alerts Events DCR
    Go to listing page

    Critical RCE Vulnerability in vBulletin via PHP Reflection API Bypass

    • Malware and Vulnerabilities
    • May 26, 2025
    • karmainsecurity
    A critical vulnerability in vBulletin versions 5.x and 6.x running on PHP 8.1 or later allows unauthenticated attackers to invoke protected methods remotely, leading to remote code execution (RCE).
    Read More
    • vBulletin
    • PHP 8.1
    • Reflection API
    • Remote Code Execution
    • Template Injection
    Cyware Publisher

    Publisher

    Previous

    Oracle TNS Flaw Exposes System Memory to Unauthorized A ...

    Malware and Vulnerabilities

    Next

    D-Link Routers Exposed by Hard-Coded Telnet Credentials

    Malware and Vulnerabilities


    RESOURCES
    Cyber Fusion Center Guide
    EVENTS

    News and Updates, Hacker News

    Get in touch with us now!

    1-855-692-9927


    Download Cyware Social App

    Terms of Use Privacy Policy © 2023