Jul 282026 Public Exploit Released for Patched vBulletin PreAuth Code Execution Flaw Public exploit details show how CVE-2026–61511 reaches PHP eval in unpatched vBulletin forums through a visitor-controlled template value.