CVE-2026-56290

🗓️ 29 Jun 2026 14:31:37Reported by JoomlaType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 362 Views🌐 WEB

Unauthenticated file upload in Joomla Page Builder CK extension below 3.6.0 enables remote code execution.

Reporter	Title	Published	Views	Family All 16
GithubExploit	Exploit for Improper Access Control in Joomlack Page_Builder_Ck	4 Jul 202600:01	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Joomlack Page_Builder_Ck	19 Jul 202608:07	–	githubexploit
GithubExploit	pbck-exploit	14 Jul 202613:06	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Joomlack Page_Builder_Ck	8 Jul 202604:30	–	githubexploit
ATTACKERKB	CVE-2026-56290	29 Jun 202614:31	–	attackerkb
BDU FSTEC	The vulnerability of the browse.ajaxAddPicture method in the PageBuilder CK extension of the Joomla content management system allows a malicious actor to gain unauthorized access to protected information, upload arbitrary files, and execute arbitrary code.	9 Jul 202600:00	–	bdu_fstec
Circl	CVE-2026-56290	29 Jun 202615:38	–	circl
CISA KEV Catalog	Joomlack Page Builder Improper Access Control Vulnerability	7 Jul 202600:00	–	cisa_kev
Cvelist	CVE-2026-56290 Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0	29 Jun 202614:31	–	cvelist
Exploit DB	Joomla Page Builder CK 3.5.10 - Arbitrary File Upload	8 Jul 202600:00	–	exploitdb

NVD

Node

joomlack page_builder_ckRange<3.6.0joomla!

[
  {
    "defaultStatus": "unaffected",
    "product": "JoomlaCK.fr Page Builder CK extension for Joomla",
    "vendor": "joomlack.fr",
    "versions": [
      {
        "status": "affected",
        "version": "1.0-3.6.0"
      }
    ]
  }
]

Source	Link
joomlack	www.joomlack.fr/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
mysites	www.mysites.guru/blog/pagebuilderck-unauthenticated-file-upload-rce/
forum	www.forum.joomlack.fr/index.php/page-builder-ck/21627-nouvelle-version-de-pbck-et-joomla-3

Parameter	Position	Path	Description	CWE
option	query param	/index.php	Unauthenticated fonts.save task exposed by Page Builder CK allows arbitrary file upload leading to RCE	CWE-434
task	query param	/index.php	Unauthenticated fonts.save task exposed by Page Builder CK allows arbitrary file upload leading to RCE	CWE-434
token	query param	/index.php	Unauthenticated fonts.save task exposed by Page Builder CK allows arbitrary file upload leading to RCE	CWE-434

08 Jul 2026 13:37Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

CVSS 410

EPSS0.02912

SSVC