vBulletin fixes ridiculously easy to exploit zero-day RCE bug

[[correlate]]

Content source

https://www.bleepingcomputer.com/news/security/vbulletin-fixes-ridiculously-easy-to-exploit-zero-day-rce-bug/

A simple one-line exploit has been published for a zero-day pre-authentication remote code execution (RCE) vulnerability in the vBulletin forum software.

vBulletin is an immensely popular online forum software utilized by large brands such as Electronic Arts, Zynga, Sony, Pearl Jam, NASA, Steam, and many more.

vBulletin fixes ridiculously easy to exploit zero-day RCE bug

A simple one-line exploit has been published for a zero-day pre-authentication remote code execution (RCE) vulnerability in the vBulletin forum software.

www.bleepingcomputer.com

 

[upnorth]

This, does not automatic fix and patch the issue. It's the sites administrators that have to do the actual work manually and implement the patch. People that use or is registered on a vBulletin site/forum should reach out and ask the staff, unless it's already locally announced.

 

[[correlate]]

This, does not automatic fix and patch the issue. It's the sites administrators that have to do the actual work manually and implement the patch. People that use or is registered on a vBulletin site/forum should reach out and ask the staff, unless it's already locally announced.

you are right .
Site administrators must bear responsibility, especially in maintaining and securing the site.