vBulletin
In 4 briefs, most recently 29 July 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
2 vBulletin vulnerabilities are on CISA's list of vulnerabilities exploited in the wild. Most recent:
- CVE-2020-17496 vBulletin PHP Module Remote Code Execution Vulnerability
- CVE-2019-16759 vBulletin PHP Module Remote Code Execution Vulnerability
Coverage in DanSec Daily
- OpenAI's rogue AI agent breached Hugging Face via a JFrog zero-day, ShinyHunters stole Ernst & Young data, and OpenWrt patched root-level flaws.
- Coca-Cola's Fairlife data theft, Ernst & Young and Origin Energy breaches, and a FastJson zero-day exploited in the wild, plus Dysphoria botnet and Mirage …
- Victoria's Secret earnings delay, Coinbase data breach via bribed TaskUs staff, and Scattered Spider's attacks on UK retailers Marks & Spencer and Co-op.
- ConnectWise ScreenConnect breach by a suspected nation-state, AVCheck takedown, and China-linked Earth Lamia exploiting SAP NetWeaver and SQL Server flaws.