{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "Unauthenticated POST /index.php with routestring=ajax/render/pagenav and pagenav[pagenumber]",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "vBulletin 5.1.5 HTTP front controller",
    "vB5_Frontend_ApplicationLight::callRender",
    "ajax/render/pagenav",
    "stock pagenav template",
    "vB5_Template_Runtime::runMaths",
    "PHP 7.0.32 eval",
    "system command"
  ],
  "target_url": "http://127.0.0.1:18082/",
  "source_identity": {
    "product": "vBulletin 5.1.5",
    "product_image_manifest": "sha256:df5a9fa87186c49101db79577a0401c07f1239bf79dd1e5d066328147f6727f8",
    "php_runtime_image_manifest": "sha256:60cbd13178ed7f629098b1b7a0104ce038d55729f89784739e1bc2eca372f64a"
  },
  "proof_artifacts": [
    "logs/repro/durable-positive-4-source-identity.txt",
    "logs/repro/durable-positive-4-health.txt",
    "logs/repro/durable-positive-4-baseline-request.trace",
    "logs/repro/durable-positive-4-baseline-response.txt",
    "logs/repro/durable-positive-4-exploit-request.trace",
    "logs/repro/durable-positive-4-exploit-response.txt",
    "logs/repro/durable-positive-4-payload.txt",
    "logs/repro/durable-positive-4-proof.log",
    "logs/repro/durable-positive-4-marker.txt",
    "logs/repro/durable-positive-4-mysql.log",
    "logs/repro/durable-positive-4-apache-stdout.log",
    "logs/repro/durable-positive-4-apache-error.log",
    "logs/repro/durable-positive-4-apache-access.log",
    "logs/repro/durable-positive-4-observation.json"
  ],
  "notes": "CVE-2026-61511 run durable-positive-4: confirmed_pre_auth_command_execution"
}