CVE-2026-63048

Description

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-63048 ↗
• www.joomlack.fr/ ↗

Related CVEs

• CVE-2026-77994joomlack.fr / Page Builder CK extension for JoomlaCVSS 9.3
• CVE-2026-74254joomlack.fr / Page Builder CK extension for JoomlaCVSS 9.3
• CVE-2026-2395Xpoda Türkiye Informatics Technology Inc. / No Code PlatformCVSS 9.8
• CVE-2026-16232checkpoint / Quantum Security Management · +1KEVCVSS 9.3
• CVE-2026-8152Unblu inc. / Unblu SparkCVSS 9.3
• CVE-2026-16424Google / ChromeCVSS 9.6
• CVE-2026-16419Google / ChromeCVSS 9.6
• CVE-2026-62414joomlack.fr / Page Builder CK extension for JoomlaCVSS 9.1