Joomla 2.9.99.4 - Unauthenticated Remote Code Execution

Exploit Title: Joomla 2.9.99.4 -Unauthenticated Remote Code Execution Date: 2026-07-10 Exploit Author: K3ysTr0K3R Jared Brits Vendor Homepage: https://www.joomla.org/ Software Link: https://extensions.joomla.org/extension/jce/ Version: JCE 1.0.0 through 2.9.99.4 fixed in 2.9.99.5 Tested on: Jooml...

CVE-2026-65891

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor JCE 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files t...

CVE-2026-65891: Improper Input Validation

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor JCE 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files t...

Security Bulletin: Security Vulnerability in the IBM Java Runtime Environment (JRE) affect the 3592 Enterprise Tape Controller

Summary Vulnerabilities in in the IBM Java Runtime Environment JRE , affect the 3592 Enterprise Tape Controller. These vulnerabilities were disclosed in the Java Critical Patch Updates for July and October 2015 Vulnerability Details CVEID: CVE-2015-2613 DESCRIPTION: An unspecified vulnerability a...

Exploit for Improper Access Control in Widgetfactorylimited Jce

─── CVE-2026-48907 ─── 🏴 AMN SECURITY 🏴 مركز أب...

Exploit for Improper Access Control in Widgetfactorylimited Jce

CVE-2026-48907 — Joomla JCE Unauthenticated RCE Lab PSsec...

Exploit for Improper Access Control in Widgetfactorylimited Jce

CVE-2026-48907 – Joomla JCE Unauthenticated Remote Code Execut...

COM_JCE_VANDA

COMJCEVANDA - CVE-2026-48907 Exploit de upload de arquivo sem...

Joomla JCE < 2.9.99.5 - Unauthenticated RCE (CVE-2026-48907)

Exploits CVE-2026-48907 in Joomla JCE Editor 2.9.99.5: unauthenticated arbitrary file upload via profile import or JCE browser chain, followed by PHP webshell execution. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

Exploit for Improper Access Control in Widgetfactorylimited Jce

No d...

Exploit for Improper Access Control in Widgetfactorylimited Jce

MASTA CVE-2026-48907 Scanner Joomla! JCE 2.9.99.5 Unauthe...

Exploit for Improper Access Control in Widgetfactorylimited Jce

CVE-2025-48907 - Joomla! JCE Unauthenticated RCE Joomla! JCE e...

Exploit for Improper Access Control in Widgetfactorylimited Jce

Joomla JCE CVE-2026-48907 — PoC Validation, Webshell Artifacts...

Exploit for CVE-2026-48907

CVE-2026-48907 CVE-2026-48907 is a critical improper acc...

CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor JCE to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...

VulnCheck KEV: CVE-2026-48907

Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the creation of new editor profiles for unauthenticated users...

Exploit for CVE-2026-48907

CVE-2026-48907 Educational PoC ⚠️ This repository is for ed...

Exploit for CVE-2026-48907

CVE-2026-48907: Unauthenticated RCE in JCE Joomla Proof o...

CVE-2026-48907

CVE-2026-48907 — Joomla JCE extension unauthenticated RCE is a vulnerability in the Joomla Content Editor (JCE) that allows unauthenticated users to create editor profiles and upload PHP payloads, enabling remote code execution. Technical details across documents show an unrestricted file upload ...

CVE-2026-48907

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution...