Critical severity9.8CISA KEVNVD Advisory· Published Jun 29, 2026· Updated Jul 24, 2026
CVE-2026-56290
CVE-2026-56290
Description
Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
Affected products
3- Range: <3.6.0
- Range: <3.6.0
Patches
Vulnerability mechanics
References
4- forum.joomlack.fr/index.php/page-builder-ck/21627-nouvelle-version-de-pbck-et-joomla-3nvdIssue TrackingPatch
- mysites.guru/blog/pagebuilderck-unauthenticated-file-upload-rce/nvdExploitThird Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
- www.joomlack.frnvdProduct
News mentions
0No linked articles in our index yet.