EIP-2026-113013

This exploit leverages an SSRF vulnerability in vBulletin's remote upload feature to send arbitrary data to loopback-only services like Memcached, allowing arbitrary code execution by manipulating the `pluginlist` value. The provided cURL command demonstrates the attack by injecting a malicious payload into Memcached via localhost.