Back to the CVE list
CVE-2026-61424Suited to automated attack · CISA

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2

CVSS score

10.0

EPSS probability

%0.4

Risk score

0.0

Published

2 mo ago

OverviewPublic Exploits (2)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
theendofabbys/CVE-2026-61424
GitHub

theendofabbys/CVE-2026-61424

Public PoCSource updated: 08.10.2026 03:50:39
G
shinthink/CVE-2026-61424
GitHub

DJ-Classifieds Joomla Component Unauthenticated File Upload RCE. 3-string filter bypass via PHP short tags. CVSS 10.0 | CWE-434 | com_djclassifieds < 3.11.2

Public PoCSource updated: 15.09.2026 00:31:15

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-61424"