CVE-2026-56290 Joomlack.Fr JoomlaCK.Fr Page Builder CK…
Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
- CVSS
- 10.0 Critical
- EPSS
- 31%
- Percentile
- 98
- Published
- 2026-06-29
- Force
- 11 of 12
- Public PoC
- 6
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red
On CISA’s exploited list
Joomlack Page Builder Improper Access Control Vulnerability
- Added
- 2026-07-07
- Federal patch deadline
- 2026-07-10
- Ransomware use
- not known