Public exploit released for critical unauthenticated RCE vulnerability in vBulletin

A proof-of-concept exploit has been released for a critical vulnerability in vBulletin that allows unauthenticated remote code execution via a single request to the PHP eval() function. The vulnerability poses a high risk to self-hosted instances, as it requires no user interaction or authentication to trigger. Immediate patching is required to mitigate potential exploitation.