Exploitation Summary
EIP tracks 2 public exploits for CVE-2026-21627. PoCs published by XiaomingX, yallasec.
AI-analyzed exploit summary This repository contains a functional Python exploit for CVE-2026-21627, targeting an unauthenticated arbitrary PHP file inclusion vulnerability in the Tassos/Novarain Framework for Joomla CMS. The exploit leverages the 'ajaxTaskInclude()' function to include arbitrary PHP files, enabling file upload, deletion, and potential RCE via SSI injection or PHP polyglot uploads.
Description
The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.
Exploits (2)
This repository contains a functional Python exploit for CVE-2026-21627, targeting an unauthenticated arbitrary PHP file inclusion vulnerability in the Tassos/Novarain Framework for Joomla CMS. The exploit leverages the 'ajaxTaskInclude()' function to include arbitrary PHP files, enabling file upload, deletion, and potential RCE via SSI injection or PHP polyglot uploads.
This repository contains a functional Python exploit for CVE-2026-21627, targeting an unauthenticated arbitrary PHP file inclusion vulnerability in the Tassos/Novarain Framework (plg_system_nrframework) for Joomla CMS versions 4.10.14 to 6.0.37. The exploit leverages the 'include' task in onAjaxNrframework() with a raw input filter bypass to achieve file inclusion, deletion, and potential RCE via gadget classes like nrinlinefileupload.
References (1)
Scores
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H