Back to Live Pulse
Critical
Page builder ck
Unrestricted Upload of File with Dangerous Type

CVE-2026-56290

Description

The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

Proof of Concept (POC) Links

Explore how this vulnerability can be reproduced or exploited.

https://mysites.guru/blog/pagebuilderck-unauthenticated-file-upload-rce/https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56290