Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
Title source: cnaExploitation Summary
EIP tracks 3 public exploits for CVE-2026-48907. PoCs published by 0xBlackash, ywh-jfellus, webshellseo8.
AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2026-48907, an unauthenticated RCE vulnerability in JCE (Joomla Content Editor) caused by improper access control (CWE-284). It includes root cause analysis, exploitation flow, mitigation steps, and detection opportunities but does not contain actual exploit code.
Description
A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.
Exploits (3)
This repository provides a detailed technical analysis of CVE-2026-48907, an unauthenticated RCE vulnerability in JCE (Joomla Content Editor) caused by improper access control (CWE-284). It includes root cause analysis, exploitation flow, mitigation steps, and detection opportunities but does not contain actual exploit code.
This repository contains a functional exploit PoC for CVE-2026-48907, targeting a Joomla vulnerability. The exploit demonstrates arbitrary file upload and remote code execution by uploading a malicious PHP file to the tmp/ directory and executing it.
This repository contains a functional exploit for CVE-2026-48907, an unauthenticated RCE vulnerability in JCE Joomla. The exploit automates the process of uploading malicious PHP payloads via the JCE editor's file upload functionality and verifies RCE by executing arbitrary commands.
References (1)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:Red