Paper/Archive/CVE-2026-48908

CVE-2026-48908

joomshaper.net SP Page Builder extension for Joomla — Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

KEV · due 10 Jul EPSS 89%public exploit SSVC act CVSS 10.0

critical.is priorityof 100

100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 In CISA KEV+3030.0 EPSS percentile 99.8.998 × 2020.0 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

Affected

ProductAffectedFixed inSource

SP Page Builder extension for Joomla1.0.0-6.6.1–CNA

Scores by source

Joomla (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refjoomshaper.com/page-builder writeupmysites.guru/blog/sp-page-builder-zero-day-uploadcustomicon-rce advisoryjoomshaper.com/forum/question/45152 patchextensions.joomla.org/extension/sp-page-builder refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48908 kevcisa.gov/known-exploited-vulnerabilities-catalog