CVE-2026-102427

CVE-2026-102427 — OrdaSoft OS CCK comoscck unauthenticated upload RCE Python 3 PoC for CVE-2026-102427 — OrdaSoft Joomla CCK — unauthenticated RCE via task=getContent → site/uploader.php GIF/PHP polyglot, .php filename. | ---|--- CVE.org| https://vulners.com/cve/CVE-2026-102427 PUBLISHED 2026-09-...

Exploit for CVE-2026-102427

CVE-2026-102427 — OrdaSoft OS CCK comoscck unauthenticated...

CVE-2026-102427

Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK 8.3.16 - site/uploader.php is reached through the component’s normal frontend routing task=getContent, a task with no authentication or ACL check anywhere in the dispatch chain. The handler validates th...

EUVD-2026-89995

Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK 8.3.16 - site/uploader.php is reached through the component’s normal frontend routing task=getContent, a task with no authentication or ACL check anywhere in the dispatch chain. The handler validates th...

CVE-2026-102427

The OrdaSoft Joomla CCK extension (versions

CVE-2026-102427: Unrestricted Upload of File with Dangerous Type

Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK 8.3.16 - site/uploader.php is reached through the component’s normal frontend routing task=getContent, a task with no authentication or ACL check anywhere in the dispatch chain. The handler validates th...