Joomla SP Page Builder RCE
FortiGuard Labs continues to observe active exploitation of CVE-2026-48908, a critical unauthenticated remote code execution vulnerability affecting the JoomShaper SP Page Builder extension for Joomla. At the time of release, FortiGuard telemetry recorded 1,210 blocked exploitation attempts in the last 24 hours and 15,626 attempts over the past 7 days.
Read at FortiGuard Outbreak Alerts
- Vendor
- Fortinet, Joomla
- Product
- Joomla
- Exploitation
- observed in the wild
- Exposure class
- Web platform
Why it ranks 50 (High)
- Exploitation observed in the wild
- Product class: web platform
- Covered by 3 independent sources
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- FortiGuard Outbreak Alerts (fortiguard.fortinet.com)
- CVE-2026-48908 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.