CVE-2026-61511 | vBulletin up to 5.7.5/6.2.1 Template Runtime runMaths pagenav[pagenumber] code injection

July 27, 2026 Yanac

A vulnerability classified as critical has been found in vBulletin up to 5.7.5/6.2.1. Affected by this issue is the function vB5_Template_Runtime::runMaths of the component Template Runtime. The manipulation of the argument pagenav[pagenumber] leads to code injection.

This vulnerability is uniquely identified as CVE-2026-61511. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More