Cross Site Scripting Vulnerability in vBulletin Login Component

CVE-2026-9357

What is CVE-2026-9357?

A vulnerability identified in vBulletin 6.x allows for cross site scripting through an unprotected function in the Login component. This security flaw enables attackers to perform remote manipulations, potentially compromising user data or session integrity. The exploit has been publicly disclosed, heightening the urgency for users to secure their systems. Despite early notification to the vendor regarding this issue, there has been no response, leaving users at risk.

References