https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T05:07:11.669923+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-01940 bdu:2023-01940 2026-10-05T05:07:11.768642+00:00 bdu:2023-01940 https://cve.radiocsirt.org/vuln/euvd-2026-225272 EUVD-2026-225272 2026-10-05T05:07:11.768732+00:00 EUVD-2026-225272 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25135 fkie_cve-2023-25135 2026-10-05T05:07:11.768761+00:00

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verify_serialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions are 5.6.7 PL1, 5.6.8 PL1, and 5.6.9 PL1.

 https://cve.radiocsirt.org/vuln/ghsa-r8jw-f89q-p7g6 GHSA-r8jw-f89q-p7g6 2026-10-05T05:07:11.768794+00:00

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verify_serialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions are 5.6.7 PL1, 5.6.8 PL1, and 5.6.9 PL1.

 https://cve.radiocsirt.org/vuln/gsd-2023-25135 gsd-2023-25135 2026-10-05T05:07:11.768811+00:00 gsd-2023-25135 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0288 WID-SEC-W-2023-0288 — vBulletin Connect: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes 2026-10-05T05:07:11.768822+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in vBulletin Connect ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.