Skip to content

CVE-2026-48907

CVE

Threat entity extracted from intelligence sources

Frequency
7
occurrences
First Seen
June 17, 2026
Last Seen
August 4, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerabilities in Joomla Extensions CVE-2026-48907 & CVE-2026-4890889.0

Two critical vulnerabilities affecting Joomla extensions have been reported: CVE-2026-48907 in the Joomla Content Editor (JCE) and CVE-2026-48908 in the SP Page Builder. Both vulnerabilities allow unauthenticated remote attackers to execute arbitrary PHP code on affected servers, leading to potentia...

Critical Joomla JCE Vulnerability Under Active Exploitation87.2

A critical vulnerability in the Joomla Content Editor (JCE), tracked as CVE-2026-48907, allows unauthenticated attackers to execute remote code on affected Joomla sites. This flaw affects JCE versions below 2.9.99.6 and has a CVSS score of 10.0. Attackers exploit this vulnerability by importing rogu...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

MalwareData BreachWeb ShellZero-day ExploitCWE-434 - Unrestricted Upload Of File With Dangerous TypeCWE-862 - Missing AuthorizationCWE-94 - Code InjectionCWE-287 - Improper AuthenticationGovernmentT1505.003 - Web ShellT1053 - Scheduled Task/JobT1059 - Command and Scripting Interpreter