https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:36:51.949777+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-06790 bdu:2025-06790 2026-10-04T17:36:51.952842+00:00 bdu:2025-06790 https://cve.radiocsirt.org/vuln/euvd-2026-241404 EUVD-2026-241404 2026-10-04T17:36:51.952874+00:00 EUVD-2026-241404 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48827 fkie_cve-2025-48827 2026-10-04T17:36:51.952888+00:00

vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern, as exploited in the wild in May 2025.

 https://cve.radiocsirt.org/vuln/ghsa-23fp-mrfv-cwv4 GHSA-23fp-mrfv-cwv4 2026-10-04T17:36:51.952917+00:00

vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1148 WID-SEC-W-2025-1148 — vBulletin Connect: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-04T17:36:51.952935+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in vBulletin Connect ausnutzen, um beliebigen Programmcode auszuführen.