Back to the CVE list
CVE-2026-48907 CISA KEV · Actively exploited

Improper access control in Widgetfactorylimited Jce

CVSS score

9.8

EPSS probability

%16.2

Risk score

3.2

Published

4 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

CVE-2026-48907 - Joomla JCE Editor Unauthenticated RCE - PoC & Analysis | CVSS 9.8 CRITICAL | AMN SECURITY (★1)

Public PoCSource updated: 13.07.2026 22:37:57

Unauthenticated Remote Code Execution (RCE) vulnerability in the JCE (Joomla Content Editor) extension for Joomla (★1)

Public PoCSource updated: 19.07.2026 18:02:15

JCEzploit is a powerful, fully-automated RCE exploit for Joomla JCE (CVE-2026-48907) featuring interactive shell, batch command execution, file download capability, and proxy support. Built with Python & Rich for penetration testers. Ethical use only. By Sudeepa Wanigarathna. (★1)

Public PoCSource updated: 22.08.2026 03:26:00

CVE-2026-48907: Unauthenticated RCE in JCE (Proof Of Concept) (★0)

Public PoCSource updated: 10.06.2026 02:08:27

PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE (★0)

Public PoCSource updated: 12.06.2026 00:03:28

CVE-2026-48907 (★0)

Public PoCSource updated: 12.06.2026 18:27:58

CVE-2026-48907 (★0)

Public PoCSource updated: 17.06.2026 15:14:55

CVE-2026-48907 is a critical improper access control vulnerability in the JCE editor extension for Joomla. It allows unauthenticated attackers to create new editor profiles, which can ultimately lead to arbitrary PHP file upload and remote code execution on affected systems (★0)

Public PoCSource updated: 18.06.2026 00:11:07

Defensive lab validation and SOC detection guidance for CVE-2026-48907 in Joomla JCE <= 2.9.99.4, including Apache/Joomla/auditd telemetry, webshell artifacts, Sigma rules, MITRE ATT&CK mapping and mitigation recommendations. (★0)

Public PoCSource updated: 19.06.2026 07:17:11

cve-2026-48907 scanner (★0)

Public PoCSource updated: 27.06.2026 14:25:49

CVE-2026-48907 is a CVSS 10.0 pre-auth RCE in Joomla Content Editor affecting all versions ≤ 2.9.99.4. The Grayxploit team breaks down the 3-weakness chain — missing auth, no extension validation, and an unsafe upload flag — that lets attackers pop a shell in 3 HTTP requests. (★0)

Public PoCSource updated: 27.06.2026 18:56:58

CVE-2026-48907 – Joomla JCE Unauthenticated Remote Code Execution (RCE) (★0)

Public PoCSource updated: 30.06.2026 06:36:25

POC for CVE-2026-48907 (★0)

Public PoCSource updated: 01.07.2026 00:50:20

CVE-2026-48907 PoC (★0)

Public PoCSource updated: 01.07.2026 23:22:32

Joomla JCE_2.9.15 - Remote Code Execution

Exploit referenceSource updated: 17.08.2026 00:00:00

Joomla 2.9.99.4 - Unauthenticated Remote Code Execution

Exploit referenceSource updated: 10.08.2026 00:00:00

Nuclei: Joomla! JCE extension < 2.9.99.5 unauthenticated RCE

Exploit reference

Python & template nuclei

Public PoC

ksotaria1337/-CVE-2026-48907-

Public PoC

NONAME-ELV/CVE-2026-48907

Public PoC

sec0x/CVE-2026-48907

Public PoC

theendofabbys/CVE-2026-48907

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-48907"