← All advisories

Critical severity9.8NVD Advisory· Published Mar 5, 2026· Updated Jun 17, 2026

CVE-2026-21628

CVE-2026-21628

Description

A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Templaza/Astroid Framework
cpe:2.3:a:templaza:astroid_framework:*:*:*:*:*:joomla\!:*:*
Range: >=2.0.0,<=3.3.10
Astroidframe.work/Astroidllm-create
astroidframe.work/Astroid Template Frameworkv5
Range: 2.0.0-3.3.10

Patches

Vulnerability mechanics

References

1

astroidframe.worknvdProduct

News mentions

0

No linked articles in our index yet.