CVE-2026-21627

This repository contains a functional Python exploit for CVE-2026-21627, targeting an unauthenticated arbitrary PHP file inclusion vulnerability in the Tassos/Novarain Framework for Joomla CMS. The exploit leverages the 'ajaxTaskInclude()' function to include arbitrary PHP files, enabling file upload, deletion, and potential RCE via SSI injection or PHP polyglot uploads.

This repository contains a functional Python exploit for CVE-2026-21627, targeting an unauthenticated arbitrary PHP file inclusion vulnerability in the Tassos/Novarain Framework (plg_system_nrframework) for Joomla CMS versions 4.10.14 to 6.0.37. The exploit leverages the 'include' task in onAjaxNrframework() with a raw input filter bypass to achieve file inclusion, deletion, and potential RCE via gadget classes like nrinlinefileupload.