Hackers are exploiting critical flaw in vBulletin forum software

Hackers are exploiting critical flaw in vBulletin forum software

Two critical vulnerabilities affecting the open-source forum software vBulletin have been discovered, with one confirmed to be actively exploited in the wild. [...]

vBulletin Bugged Again: Critical Exploits Hit Popular Forum Software, Active Attacks Confirmed - THE iBULLETIN

Two critical vulnerabilities in vBulletin, one of the most widely used online forum platforms, are being actively exploited, raising alarms across the cybersecurity world. The bugs, now tracked as CVE-2025-48827 and CVE-2025-48828, hit hard — with one scoring a perfect 10 on the CVSS scale. The exploit is already out there, and attackers are wasting no time. Discovered by researcher Egidio Romano, aka EgiX, the flaws can give remote attackers fu…