Unrated severityNVD Advisory· Published Jul 11, 2026· Updated Jul 23, 2026

Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12

CVE-2026-57827

Description

Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

Affected products

Joomla/com_rsfilesllm-create
Range: <1.17.12
Rsjoomla.com/RSFiles componentllm-create
Range: <1.17.12

Patches

Vulnerability mechanics

References

mysites.guru/blog/rsfiles-unauthenticated-file-upload-rce/mitrethird-party-advisory
www.rsjoomla.com/joomla-extensions/joomla-download-manager.htmlmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000