vBulletin patches critical pre-authentication remote code execution vulnerability

vBulletin has released a security update addressing a critical pre-authentication remote code execution (RCE) flaw that allows attackers to execute arbitrary PHP code via template rendering. The vulnerability is currently being exploited in the wild, posing a significant risk to forum administrators who have not yet applied the patch.