vBulletin 5.x through 5.1.6 allows remote authenticated users to bypass authorization…
Priority LOW 31CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
vBulletin 5.x through 5.1.6 allows remote authenticated users to bypass authorization checks and inject private messages into conversations via vectors related to an input validation failure.
Why it matters now
EPSS 0.00977 62nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 23
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vbulletin:vbulletin:5.0.0:beta_11:*:*:*:*:*:* | 5.0.0 beta_11 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.0.0:beta_28:*:*:*:*:*:* | 5.0.0 beta_28 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.0.1:*:*:*:*:*:*:* | 5.0.1 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.0.2:*:*:*:*:*:*:* | 5.0.2 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.0.3:*:*:*:*:*:*:* | 5.0.3 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.0.4:*:*:*:*:*:*:* | 5.0.4 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.0.5:*:*:*:*:*:*:* | 5.0.5 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.0:*:*:*:*:*:*:* | 5.1.0 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.0:rc1:*:*:*:*:*:* | 5.1.0 rc1 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.1:*:*:*:*:*:*:* | 5.1.1 | Vulnerable | vBulletin |
- cpe:2.3:a:vbulletin:vbulletin:5.0.0:beta_11:*:*:*:*:*:* Versions 5.0.0 beta_11 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.0.0:beta_28:*:*:*:*:*:* Versions 5.0.0 beta_28 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.0.2:*:*:*:*:*:*:* Versions 5.0.2 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.0.3:*:*:*:*:*:*:* Versions 5.0.3 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.0.4:*:*:*:*:*:*:* Versions 5.0.4 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.0.5:*:*:*:*:*:*:* Versions 5.0.5 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.0:*:*:*:*:*:*:* Versions 5.1.0 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.0:rc1:*:*:*:*:*:* Versions 5.1.0 rc1 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.1:*:*:*:*:*:*:* Versions 5.1.1 Vulnerable ·vBulletin
Show 13 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vbulletin:vbulletin:5.1.2:beta1:*:*:*:*:*:* | 5.1.2 beta1 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.2:rc1:*:*:*:*:*:* | 5.1.2 rc1 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.2:rc2:*:*:*:*:*:* | 5.1.2 rc2 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.3:*:*:*:*:*:*:* | 5.1.3 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.3:alpha5:*:*:*:*:*:* | 5.1.3 alpha5 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.3:rc1:*:*:*:*:*:* | 5.1.3 rc1 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.4:*:*:*:*:*:*:* | 5.1.4 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.4:rc1:*:*:*:*:*:* | 5.1.4 rc1 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.5:*:*:*:*:*:*:* | 5.1.5 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.5:beta_1:*:*:*:*:*:* | 5.1.5 beta_1 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.5:beta_3:*:*:*:*:*:* | 5.1.5 beta_3 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.6:*:*:*:*:*:*:* | 5.1.6 | Vulnerable | vBulletin |
| cpe:2.3:a:vbulletin:vbulletin:5.1.6:beta_2:*:*:*:*:*:* | 5.1.6 beta_2 | Vulnerable | vBulletin |
- cpe:2.3:a:vbulletin:vbulletin:5.1.2:beta1:*:*:*:*:*:* Versions 5.1.2 beta1 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.2:rc1:*:*:*:*:*:* Versions 5.1.2 rc1 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.2:rc2:*:*:*:*:*:* Versions 5.1.2 rc2 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.3:*:*:*:*:*:*:* Versions 5.1.3 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.3:alpha5:*:*:*:*:*:* Versions 5.1.3 alpha5 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.3:rc1:*:*:*:*:*:* Versions 5.1.3 rc1 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.4:*:*:*:*:*:*:* Versions 5.1.4 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.4:rc1:*:*:*:*:*:* Versions 5.1.4 rc1 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.5:*:*:*:*:*:*:* Versions 5.1.5 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.5:beta_1:*:*:*:*:*:* Versions 5.1.5 beta_1 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.5:beta_3:*:*:*:*:*:* Versions 5.1.5 beta_3 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.6:*:*:*:*:*:*:* Versions 5.1.6 Vulnerable ·vBulletin
- cpe:2.3:a:vbulletin:vbulletin:5.1.6:beta_2:*:*:*:*:*:* Versions 5.1.6 beta_2 Vulnerable ·vBulletin
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2015-3419
- 2026-10-03 Alias added: GHSA-vqmw-3gq4-45pv
References
More Vbulletin vulnerabilities
- TI-2020-13248 vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data… KEVCVSS 3.1CRITICAL 9.8
- TI-2019-12540 vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code]… KEVCVSS 3.1CRITICAL 9.8
- TI-2025-31014 vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to… CVSS 3.1CRITICAL 10.0
- TI-2020-10114 vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control. CVSS 3.1CRITICAL 9.8
- TI-2023-10600 vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary… CVSS 3.1CRITICAL 9.8
- TI-2016-05317 SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before… CVSS 3.0CRITICAL 9.8
Sources
- CVE-2015-3419 · CVE Program
- CVE-2015-3419 · NVD
- FIRST EPSS
- GHSA-vqmw-3gq4-45pv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences