CVE-2020-12720

—

CVSS 3.1

9.8 critical

EPSS

89%p100

Published

May 8, 2020 (May 8, 2020)

Modified

Jun 17, 2026

Description

vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.

Vendors: vbulletin
Products: vbulletin
Weakness: CWE-89, CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (88.9%)

In the news4 stories

Network Attack Trends: Internet of Threats (November 2020

Palo Alto Unit 42Jun 6, 13:24 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2020-28188 CVE-2020-17519 CVE-2020-29227+62 CVEs

60

vBulletin fixes critical vulnerability, patch immediately!

Help Net SecurityMay 28, 10:04 UTC · May 28, 2020Vulnerability CVE-2020-12720

60

Patch now your vBulletin install before hacker will target your forum

Security AffairsMay 12, 11:33 UTC · May 12, 2020Vulnerability CVE-2020-12720

60

An Undisclosed Critical Vulnerability Affect vBulletin Forums — Patch Now

The Hacker NewsMay 11, 19:11 UTC · May 11, 2020Vulnerability in the wildCVE-2020-12720

60