CVE-2026-56290

Joomlack Page Builder Improper Access Control Vulnerability

Page Builder Ck

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

29. Jun 2026

Ausgewertete Quellen

• Hinweis
  https://mysites.guru/blog/pagebuilderck-unauthenticated-file-upload-rce/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56290
• CISA
  Joomlack Page Builder Improper Access Control Vulnerability
• NVD
  CVE-2026-56290