CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-17 05:50 UTC
  • Importiert: 2026-06-25 08:59 UTC
  • CVSS: 10.0
  • Quelle-ID: thn_global
  • uid_hash: 9924228eceebf177d97c749b91bf9a9535149581218a939e17ce039d7eb53774
The Hacker News

Inhalt

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor (JCE) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

The vulnerability, tracked as CVE-2026-48907 (CVSS score: 10.0), is a case of improper access control that could facilitate arbitrary

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-48907

CRITICAL

10

CRITICAL

10

2026-06-05

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste