Description
The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
Published: 2026-06-29
Score: 10 Critical
EPSS: 2.9% Low
KEV: Yes
Impact: n/a
Action: n/a
AI Analysis

Impact

The Joomla extension Page Builder CK for Joomla contains an unrestricted file upload flaw (CWE-434) that permits unauthenticated users to upload arbitrary files, including executable scripts, which are then executed by the web server. Attackers can therefore achieve full remote code execution on the host system.

Affected Systems

All installations of the joomlack.fr Page Builder CK extension for Joomla that are running any version prior to 3.6.0 are vulnerable.

Risk and Exploitability

The vulnerability scores a CVSS of 10.0. Its EPSS score of 3% indicates a low probability of exploitation, although the unauthenticated exploitation path is listed in the CISA KEV catalog. Based on the description, it is inferred that attackers could send crafted HTTP requests to the extension's upload endpoint, upload malicious scripts, and then trigger their execution with the web server’s privileges.

Generated by OpenCVE AI on July 17, 2026 at 02:33 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Page Builder CK extension to version 3.6.0 or later, which removes the unauthenticated upload capability.
  • If an upgrade cannot be applied immediately, disable the extension or restrict upload access so that only authenticated administrators can use it.
  • Configure the web server to prevent execution of files in the upload directory, for example by disabling script execution or adding appropriate .htaccess rules.

Generated by OpenCVE AI on July 17, 2026 at 02:33 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 07 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 07 Jul 2026 17:45:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2026-07-07T00:00:00+00:00', 'dueDate': '2026-07-10T00:00:00+00:00'}

Sun, 05 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284 CWE-434

Wed, 01 Jul 2026 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Joomlack
Joomlack page Builder Ck Extension For Joomla
Vendors & Products Joomlack
Joomlack page Builder Ck Extension For Joomla

Tue, 30 Jun 2026 17:30:00 +0000

Type Values Removed Values Added
References

Mon, 29 Jun 2026 17:30:00 +0000

Type Values Removed Values Added
References

Mon, 29 Jun 2026 16:30:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 29 Jun 2026 15:00:00 +0000

Type Values Removed Values Added
Description The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
Title Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0
Weaknesses CWE-284
References
Metrics cvssV4_0

{'score': 10, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red'}

Subscriptions

Joomlack Page Builder Ck Extension For Joomla
cve-icon MITRE

Status: PUBLISHED

Assigner: Joomla

Published:

Updated: 2026-07-08T09:53:18.704Z

Reserved: 2026-06-20T11:57:32.752Z

Link: CVE-2026-56290

cve-icon Vulnrichment

Updated: 2026-06-29T15:12:24.172Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-17T02:45:08Z

Weaknesses
  • CWE-434

    Unrestricted Upload of File with Dangerous Type