July 29, 2026
- vBulletin patched a critical pre-auth RCE (CVE-2026-61511) in template rendering that lets unauthenticated attackers execute arbitrary PHP — a public exploit is already circulating and FOFA shows ~11,000 exposed instances (BleepingComputer). · Vulnerabilities & Exploits
in Artifactory Zero-Days Confirmed as the Hugging Face AI Agent's Escape Route