vBulletin
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 1
en
Verify to analyze this security profile
As of 09/20/2026, vBulletin recorded 1 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, vBulletin had the most security vulnerabilities in the vBulletin ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-61511vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php | Exploitation statusPublic exploit | FixNot confirmed | Affected productvBulletin | Published07/27/2026 | SeverityCritical |
CVE-2025-46171 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published07/23/2025 | SeverityMedium |
CVE-2025-48828 | Exploitation statusPublic exploit | FixNot confirmed | Affected productvBulletin | Published05/27/2025 | SeverityCritical |
CVE-2025-48827 | Exploitation statusPublic exploit | FixNot confirmed | Affected productvBulletin | Published05/27/2025 | SeverityCritical |
CVE-2023-39777 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published09/16/2023 | SeverityUnknown |
CVE-2023-25135 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published02/03/2023 | SeverityCritical |
CVE-2020-7373 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/30/2020 | SeverityUnknown |
CVE-2020-25115 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/03/2020 | SeverityUnknown |
CVE-2020-25116 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/03/2020 | SeverityUnknown |
CVE-2020-25117 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/03/2020 | SeverityUnknown |
CVE-2020-25118 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/03/2020 | SeverityUnknown |
CVE-2020-25119 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/03/2020 | SeverityUnknown |
CVE-2020-25120 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/03/2020 | SeverityUnknown |
CVE-2020-25121 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/03/2020 | SeverityUnknown |
CVE-2020-25122 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/03/2020 | SeverityUnknown |
CVE-2020-25123 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/03/2020 | SeverityUnknown |
CVE-2020-25124 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/03/2020 | SeverityUnknown |
CVE-2020-17496 | Exploitation statusKEV | FixNot confirmed | Affected productNot confirmed | Published08/12/2020 | SeverityCritical |
CVE-2020-12720 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/07/2020 | SeverityUnknown |
CVE-2019-17271 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/08/2019 | SeverityUnknown |
CVE-2019-17132 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/04/2019 | SeverityUnknown |
CVE-2019-17131 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/04/2019 | SeverityUnknown |
CVE-2019-17130 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/04/2019 | SeverityUnknown |
CVE-2019-16759 | Exploitation statusKEV | FixNot confirmed | Affected productNot confirmed | Published09/24/2019 | SeverityCritical |
CVE-2018-15493 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/17/2018 | SeverityUnknown |
CVE-2018-6200 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/25/2018 | SeverityUnknown |
CVE-2017-17672 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published12/14/2017 | SeverityUnknown |
CVE-2017-17671 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/14/2017 | SeverityUnknown |
CVE-2015-3419 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/19/2017 | SeverityUnknown |
CVE-2014-9469 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/28/2017 | SeverityUnknown |
CVE-2017-7569 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/06/2017 | SeverityUnknown |
CVE-2016-6483 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published09/02/2016 | SeverityUnknown |
CVE-2016-6195 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/30/2016 | SeverityUnknown |
CVE-2015-7808 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/24/2015 | SeverityUnknown |
CVE-2014-9438 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/02/2015 | SeverityUnknown |
CVE-2014-8670 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/06/2014 | SeverityUnknown |
CVE-2014-2021 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/25/2014 | SeverityUnknown |
CVE-2014-2022 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/15/2014 | SeverityUnknown |
CVE-2014-5102 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/25/2014 | SeverityUnknown |
CVE-2014-3135 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/30/2014 | SeverityUnknown |
CVE-2013-6129 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/19/2013 | SeverityUnknown |
CVE-2013-3522 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published05/10/2013 | SeverityUnknown |
CVE-2011-5251 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/31/2012 | SeverityUnknown |
CVE-2012-4686 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/28/2012 | SeverityUnknown |
CVE-2012-3844 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/03/2012 | SeverityUnknown |
CVE-2008-6255 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/24/2009 | SeverityUnknown |
CVE-2008-6256 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/24/2009 | SeverityUnknown |
CVE-2008-4706 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published10/23/2008 | SeverityUnknown |
CVE-2008-3773 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/22/2008 | SeverityUnknown |
CVE-2008-3184 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/15/2008 | SeverityUnknown |
CVE-2008-2744 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/17/2008 | SeverityUnknown |
CVE-2008-2460 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/27/2008 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan