CVE record · 4 sources
CVE-2026-48908
KEVJoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
- Vendor
- JoomShaper
- Product
- SP Page Builder
- CISA KEV
- listed
- Exposure class
- Web platform, AI infrastructure
Coverage
4Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.
-
Joomla SP Page Builder RCE
FortiGuard Labs continues to observe active exploitation of CVE-2026-48908, a critical unauthenticated remote code execution vulnerability affecting the JoomShaper SP Page Builder extension for Joomla. At the time of release…
-
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type…
-
July 2026 CVE Landscape
In July 2026, Insikt Group® identified 85 high-impact vulnerabilities that should be prioritized for remediation, 36 of which had a Very Critical Recorded Future Risk Score. This represents a 44% increase from last month.