CVE-2026-57829

Helix Ultimate Framework — 인증되지 않은 저장형 XSS comajax → 관리자 세션 라이딩 → 완전한 계정 탈취 본 연구 폴더에서 가장 강력한 발견입니다 — 심각, 완전히 엔드투엔드로 확인됨. helixultimatedeletepoc.md에 있는 삭제 전용 버그와 달리, 이것은 사이트 전체를 손상시키는 실제 작동 경로를 가지고 있습니다. 컴포넌트: JoomShaper Helix Ultimate Framework plgsystemhelixultimate + shaperhelixultimate 템플릿 테스트...

CVE-2026-57830

Helix Ultimate Framework — 인증되지 않은 경로 탐색 임의 파일/폴더 읽기+삭제 이 취약점은 확인된 DoS + 교차 테넌트 파일시스템 접근 취약점이며, RCE가 아닙니다. RCE 승격 이론configuration.php를 삭제하여 Joomla 설치 프로그램을 다시 노출하는 방법은 실환경에서 테스트되었고 반증되었습니다 — 아래 "RCE 승격 — 테스트 및 반증" 참조. 실제 체인을 먼저 새로 도출하지 않고 어떤 보고서에서도 이를 RCE로 표시하지 마십시오. 심각도 상향 2026-07-06, 두 번째 검토:...

CVE-2026-78077

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in MegaMenu Layout Container & Embed Inputs in Helix Ultimate 2.2.10 - Unsanitized column and item configuration values stored within the MegaMenu layout JSON were rendered without complete contextual escaping, allowing injection...

CVE-2026-78078

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

CVE-2026-78079

Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate 2.2.10 - Return redirect parameters accepted arbitrary Base64 strings without verifying whether the resolved target was an internal site URL via Uri::isInternal...

CVE-2026-78076

Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate 2.2.10 - The AJAX endpoint save-megamenu-settings failed to enforce item-level and menu-level edit permissions core.edit on commenus.item.id or core.admin. An authenticated use...

CVE-2026-78075

Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate 2.2.10 - Blog::removeimage checked whether the user was authorized to edit the article ID passed in the request, but did not verify whether the specified image path src belonged to that...

CVE-2026-78075

Helix Ultimate is a Joomla extension by joomshaper.com. Versions prior to 2.2.10 contain a Broken Object-Level Authorization flaw in the Blog::remove_image() function. The function verified that the user was authorized to edit the article ID supplied in the request, but did not confirm that the s...

CVE-2026-78075 Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate 2.2.10 - Blog::removeimage checked whether the user was authorized to edit the article ID passed in the request, but did not verify whether the specified image path src belonged to that...

CVE-2026-78075 Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate 2.2.10 - Blog::removeimage checked whether the user was authorized to edit the article ID passed in the request, but did not verify whether the specified image path src belonged to that...

EUVD-2026-68529

Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate 2.2.10 - Blog::removeimage checked whether the user was authorized to edit the article ID passed in the request, but did not verify whether the specified image path src belonged to that...

CVE-2026-78076 Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate 2.2.10 - The AJAX endpoint save-megamenu-settings failed to enforce item-level and menu-level edit permissions core.edit on commenus.item.id or core.admin. An authenticated use...

CVE-2026-78076

Helix Ultimate (joomshaper.com), a Joomla template/extension, is affected in versions below 2.2.10 . The vulnerability is a Broken Access Control issue in the MegaMenu Settings feature: the AJAX endpoint save-megamenu-settings failed to enforce item-level and menu-level edit permissions (core.edi...

CVE-2026-78076 Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate 2.2.10 - The AJAX endpoint save-megamenu-settings failed to enforce item-level and menu-level edit permissions core.edit on commenus.item.id or core.admin. An authenticated use...

EUVD-2026-68528

Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate 2.2.10 - The AJAX endpoint save-megamenu-settings failed to enforce item-level and menu-level edit permissions core.edit on commenus.item.id or core.admin. An authenticated use...

CVE-2026-78078

Helix Ultimate is a Joomla template by joomshaper.com. In versions prior to 2.2.10 , image uploads were validated only by file extension and basic size parameters, allowing an attacker with privileged access to upload non-image files disguised with raster extensions — a content spoofing bypass. T...

CVE-2026-78078 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

CVE-2026-78078 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

EUVD-2026-68527

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

CVE-2026-78077

CVE-2026-78077 is a Stored Cross-Site Scripting (XSS) vulnerability in the Joomla extension Helix Ultimate (by joomshaper.com) versions below 2.2.10 . The flaw resides in the MegaMenu Layout Container and Embed Inputs , where unsanitized column and item configuration values stored in the MegaMenu...