CVE-2026-57827

Description

Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-57827 ↗
• mysites.guru/blog/rsfiles-unauthenticated-file-upload-rce/ ↗
• www.rsjoomla.com/joomla-extensions/joomla-download-manager.html ↗

Related CVEs

• CVE-2026-56271Flowise / FlowiseCVSS 9.3
• CVE-2026-61447MervinPraison / PraisonAICVSS 10.0
• CVE-2026-61445MervinPraison / PraisonAICVSS 9.4
• CVE-2026-57828phoca.cz / phoca.cz Phoca Download extension for JoomlaCVSS 9.0
• CVE-2026-20744Hydro-Québec / Le Circuit Electrique charging station backendCVSS 9.3
• CVE-2026-15089Drupal / Commerce guest registrationCVSS 9.1
• CVE-2026-11913Drupal / Mother May ICVSS 9.8
• CVE-2026-55884tilt-dev / tiltCVSS 9.2