Exploit for Improper Access Control in Joomlack Page_Builder_Ck

🗓️ 04 Jul 2026 00:01:31Reported by shinthinkType

Unauthenticated file upload in Page Builder CK allows remote code execution via user-controlled path.

Reporter	Title	Published	Views	Family All 17
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Joomlack Page_Builder_Ck	19 Jul 202608:07	–	githubexploit
GithubExploit	pbck-exploit	14 Jul 202613:06	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Joomlack Page_Builder_Ck	8 Jul 202604:30	–	githubexploit
ATTACKERKB	CVE-2026-56290	29 Jun 202614:31	–	attackerkb
BDU FSTEC	The vulnerability of the browse.ajaxAddPicture method in the PageBuilder CK extension of the Joomla content management system allows a malicious actor to gain unauthorized access to protected information, upload arbitrary files, and execute arbitrary code.	9 Jul 202600:00	–	bdu_fstec
Circl	CVE-2026-56290	29 Jun 202615:38	–	circl
CISA KEV Catalog	Joomlack Page Builder Improper Access Control Vulnerability	7 Jul 202600:00	–	cisa_kev
CVE	CVE-2026-56290	29 Jun 202614:31	–	cve
Cvelist	CVE-2026-56290 Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0	29 Jun 202614:31	–	cvelist
Exploit DB	Joomla Page Builder CK 3.5.10 - Arbitrary File Upload	8 Jul 202600:00	–	exploitdb