Is CVE-2026-48908 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2026-48908 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2026-48908: SP Page Builder unrestricted file upload

CVE-2026-56290 allows unauthenticated file uploads on Joomla sites — CISA confirms active exploitation.

Joomla 2026

What WebPulse reported · 1 analysis

CVE-2026-56290 allows unauthenticated file uploads on Joomla sites — CISA confirms active exploitation.

Related vulnerabilities

CVE-2026-9082 CVE-2026-3844 CVE-2026-56290 CVE-2026-48907 CVE-2023-23752 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548