Akute Sicherheitslücke im JCE-Editor!

Mit einem Volltreffer auf der CVE-Skala (10/10) ist ein Update des JCE-Editor im Joomla kein Task für morgen, sondern für "nach meinem Wissen jetzt ... sofort".

Weitere Infos:

https://www.aditsystems.de/blog/2026/06/jce-sicherheitsluecke-cve-2026-48907/?utm_source=fediverse&utm_medium=social&utm_campaign=jce

#joomla #jce #cve #cve202648907

CISA Warns of Actively Exploited Joomla Flaw Enabling PHP Code Execution

A critical Joomla flaw, tracked as CVE-2026-48907, is being actively exploited, allowing attackers to upload and execute PHP code - and the US Cybersecurity and Infrastructure Security Agency (CISA) is warning users to take immediate action. A patch is available in version 2.9.99.5 of the Widget Factory Joomla…

https://osintsights.com/cisa-warns-of-actively-exploited-joomla-flaw-enabling-php-code-execution?utm_source=mastodon&utm_medium=social

#JoomlaFlaw #PhpCodeExecution #Cve202648907 #ImproperAccessControl #WidgetFactory

⚠️ Zero-Day Joomla Vulnerability Allows Unrestricted Code Upload & Execution

#CVE202648907 #CrossSiteScripting #JCEEditorVulnerability #JoomlaSecurity #PHPInjection #cve #cybersecurity #iso27001