CVE-2025-48907

MEDIUM

HarmonyOS - Denial of Service via IPC Module Deserialization

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-48907. PoCs published by 0xgh057r3c0n.

AI-analyzed exploit summary This repository contains a functional exploit for CVE-2026-48907, targeting an unauthenticated file upload vulnerability in Joomla! JCE extension versions below 2.9.99.5. The exploit demonstrates remote code execution by uploading arbitrary PHP files via a CSRF-protected endpoint, bypassing authentication.

Description

Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability.

Exploits (1)

nomisec WORKING POC

by 0xgh057r3c0n · poc

https://github.com/0xgh057r3c0n/CVE-2026-48907

View Code ZIP pw:eip

This repository contains a functional exploit for CVE-2026-48907, targeting an unauthenticated file upload vulnerability in Joomla! JCE extension versions below 2.9.99.5. The exploit demonstrates remote code execution by uploading arbitrary PHP files via a CSRF-protected endpoint, bypassing authentication.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Joomla! JCE extension < 2.9.99.5

No auth needed

Prerequisites: Target running vulnerable Joomla! JCE extension · Network access to the target

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1203 - Exploitation for Client Execution

mistral-large-3 · analyzed Jun 23, 2026 Full analysis →

References (1)

Core 1

Core References

Vendor Advisory

https://consumer.huawei.com/en/support/bulletin/2025/6/

Scores

CVSS v3 6.2

EPSS 0.0009

EPSS Percentile 0.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-248

Status published

Products (1)

huawei/harmonyos 5.0.0

Published Jun 06, 2025

Tracked Since Feb 18, 2026