CVE-2026-48908

JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

Sp Page Builder

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

20. Jun 2026

Ausgewertete Quellen

• Hinweis
  https://mysites.guru/blog/sp-page-builder-zero-day-uploadcustomicon-rce/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48908
• CISA
  JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
• NVD
  CVE-2026-48908