Joomlack Page Builder Improper Access Control Vulnerability

🗓️ 07 Jul 2026 00:00:00Reported by CISAType

cisa_kev

cisa_kev🔗 www.cisa.gov👁 10 Views

Joomlack Page Builder vulnerability allows remote code execution via unauthenticated file uploads.

Reporter	Title	Published	Views	Family All 17
GithubExploit	Exploit for Improper Access Control in Joomlack Page_Builder_Ck	4 Jul 202600:01	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Joomlack Page_Builder_Ck	19 Jul 202608:07	–	githubexploit
GithubExploit	pbck-exploit	14 Jul 202613:06	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Joomlack Page_Builder_Ck	8 Jul 202604:30	–	githubexploit
ATTACKERKB	CVE-2026-56290	29 Jun 202614:31	–	attackerkb
BDU FSTEC	The vulnerability of the browse.ajaxAddPicture method in the PageBuilder CK extension of the Joomla content management system allows a malicious actor to gain unauthorized access to protected information, upload arbitrary files, and execute arbitrary code.	9 Jul 202600:00	–	bdu_fstec
Circl	CVE-2026-56290	29 Jun 202615:38	–	circl
CVE	CVE-2026-56290	29 Jun 202614:31	–	cve
Cvelist	CVE-2026-56290 Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0	29 Jun 202614:31	–	cvelist
Exploit DB	Joomla Page Builder CK 3.5.10 - Arbitrary File Upload	8 Jul 202600:00	–	exploitdb

07 Jul 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.19.8

CVSS 410

EPSS0.83254

SSVC

Joomlack Page Builder Improper Access Control Remote Code Execution Unauthenticated File Upload