Back to the CVE list
CVE-2026-57827Suited to automated attack · CISA

Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12

CVSS score

10.0

EPSS probability

%2.3

Risk score

0.2

Published

3 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Unauthenticated File Upload → RCE PoC for CVE-2026-57827 (RSFiles! Joomla < 1.17.12). Authorized security research use only. (★6)

Public PoCSource updated: 02.08.2026 21:01:45

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12 (★0)

Public PoCSource updated: 30.07.2026 05:38:57

Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload. (★0)

Public PoCSource updated: 31.07.2026 05:50:40

Joomla RSFiles 未授权文件上传CVE-2026-57827检测&利用脚本 (★0)

Public PoCSource updated: 07.08.2026 07:51:04

Nuclei: RSFiles! for Joomla - Arbitrary File Upload

Exploit reference

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-57827"