← Database

CVE-2026-56290

CRITICAL CVSS: 9.8 Published: 2026-06-29 Modified: 2026-07-24

Description

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

Affected Platforms

Joomlack Page Builder Ck

Weakness Type

CWE-434, CWE-434

References