cognitive cybersecurity intelligence
Public exploit details released on July 27 show how an unauthenticated request can reach PHP’s eval() function inside vBulletin and execute code on an unpatched forum server. The attack requires no account, administrative access, or interaction from another user.
SSD Secure Disclosure lists vBulletin 6.2.1 and earlier, and 6.1.6 and earlier, as affected, but does not give a lower version
Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.
Malware found hidden inside popular ‘Meccha Chameleon’ game maps Mashable
Meccha Chameleon suffers a hack: devs address Steam malware scare and “malicious mod map issue,” confirm “all the hackers have been banned” so the official
In early 2025, Atlanta resident Samuel Tunick was on his way home following a trip abroad. After landing in the US, customs agents demanded access
vBulletin has patched CVE-2026-61511, a critical remote code execution flaw that could let unauthenticated attackers execute arbitrary PHP code and compromise vulnerable forum servers. This
