CVE-2026-48908 CISA KEV · Actively exploitedSuited to automated attack · CISA
Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
CVSS score
10.0
EPSS probability
%88.5
Risk score
17.7
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: Joomla SP Page Builder <= 6.6.1 - Unauthenticated Arbitrary File Upload RCE
Makefile Go / Python
Similar Vulnerabilities
7.5
CVE-2026-49049Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler
Patch status unknown Public Exploits:1EPSS %1
9.1
CVE-2026-57830Missing authorization in Ollyo Helix Ultimate
Patch status unknownEPSS %0
8.8
CVE-2017-20266Joomla SP Movie Database 1.3 SQL Injection via searchword
Patch status unknownEPSS %0
6.1
CVE-2026-57829Cross-site scripting in Ollyo Helix Ultimate
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-48908"