CVE-2026-48907

🔥 Known Exploited (CISA KEV)HIGH

8.5

CVSS Severity Score

EPSS Score62.1160%

EPSS Percentile88.72th

Published2026-06-05

Last Modified2026-06-16

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://www.joomlacontenteditor.net/

🔗 https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

相关漏洞威胁