CVE-2023-25135

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verify_serialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions are 5.6.7 PL1, 5.6.8 PL1, and 5.6.9 PL1.

• CWE-502
• CWE-502

• https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4473890-vbulletin-5-6-9-security-patchRelease Notes, Vendor Advisory
• https://www.ambionics.io/blog/vbulletin-unserializable-but-unreachableExploit, Technical Description, Third Party Advisory
• https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4473890-vbulletin-5-6-9-security-patchRelease Notes, Vendor Advisory
• https://www.ambionics.io/blog/vbulletin-unserializable-but-unreachableExploit, Technical Description, Third Party Advisory

Published

Feb 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2513A use-after-free vulnerability was found in the Linux kernel…6.7
• CVE-2023-25130Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-25131Use of default password vulnerability in PowerPanel Business…9.8
• CVE-2023-25132Unrestricted upload of file with dangerous type vulnerabilit…9.8
• CVE-2023-25133Improper privilege management vulnerability in default.cmd f…9.8
• CVE-2023-25134McAfee Total Protection prior to 16.0.50 may allow an advers…6.7
• CVE-2023-25136OpenSSH server (sshd) 9.1 introduced a double-free vulnerabi…6.5
• CVE-2023-25139sprintf in the GNU C Library (glibc) 2.37 has a buffer overf…9.8
• CVE-2023-2514Mattermost Sever fails to redact the DB username and passwor…7.5
• CVE-2023-25140A vulnerability has been identified in Parasolid V34.0 (All …7.8
• CVE-2023-25141Apache Sling JCR Base < 3.1.12 has a critical injection vuln…7.5
• CVE-2023-25143An uncontrolled search path element vulnerability in the Tre…9.8