CVE-2026-56290

نوع الضعف

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

المنتجات المتأثرة

• joomlack page_builder_ck

المراجع

• https://www.joomlack.fr/
• https://forum.joomlack.fr/index.php/page-builder-ck/21627-nouvelle-version-de-pbck-et-joomla-3
• https://mysites.guru/blog/pagebuilderck-unauthenticated-file-upload-rce/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56290