PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2026-48907: Unauthenticated RCE in the Joomla Content Editor extension

yeswehack.com | vulnerability | Critical | Actively exploited | CVE-2026-48907 | #active-exploitation | #rce | #public-poc | #access-control | #vulnerability | #patch-analysis | #webshell | #joomla | #cve-2026-48907
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

YesWeHack's analysis of CVE-2026-48907, a CVSS 10.0 unauthenticated RCE in the Joomla Content Editor: profile import abuse drops a PHP webshell; fixed in 2.9.99.5 with hardening in 2.9.99.6.
CVE
CVE-2026-48907
CVSS
9.8
Published
Collected

Related coverage

Critical · vulnerability · yeswehack.com
CVE-2026-9082: PostgreSQL SQL Injection in Drupal
A patch analysis of CVE-2026-9082 (SA-CORE-2026-004): a PostgreSQL-specific SQL injection in Drupal’s entity query subsystem where unsanitised array keys reach SQL, plus PoC paths and the fix.
High · vulnerability · bugcrowd.com
What we know about Copy Fail (CVE-2026-31431)
Copy Fail (CVE-2026-31431) is a Linux kernel LPE zero-day since 2017: an algif_aead logic flaw grants root and container escape; a public 732-byte exploit was found by AI in an hour.
vulnerability · wiz.io
[CVE-2026-111497] Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
vulnerability · bugpwn.com
open62541: Integer Overflow → Heap Overflow → RCE.
Original research: how a 16 bit size field overflow in open62541's custom DataType machinery lets a malicious OPC UA server corrupt a connecting client's heap, up to remote code execution. CVE-2026-116014, CVSS 9.2. Root cause, networked PoC, and the official fix. By BUG|PWN.
Critical · vulnerability · github.com
CVE-2026-63077: JetBrains TeamCity unauthenticated RCE with public PoC and active exploitation
An unauthenticated attacker who can reach a TeamCity HTTP(S) service may execute arbitrary operating-system commands with the TeamCity server process privileges, exposing configuration and credentials, changing server state, and compromising build artifacts or downstream CI/CD pipelines. CISA KEV now confirms active exploitation. Upgrade to 2025.11.7, 2026.1.3, or later immediately; if upgrading is not possible, apply JetBrains' security patch plugin, restrict internet access, rotate exposed credentials, and investigate potentially exposed instances.
Back