A working public exploit dropped on July 27 for a critical remote code execution vulnerability in vBulletin, according to [The Hacker News](https://thehackernews.com/2026/07/public-exploit-released-fo