Is CVE-2026-56290 in the CISA Known Exploited Vulnerabilities catalog?

Yes — CVE-2026-56290 is listed in CISA KEV, remediation due 2026-07-10.

CISA Known Exploited Vulnerability

CVE-2026-56290: Joomlack Page Builder unauthenticated file upload (actively exploited)

Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.

⚠ Actively exploited (CISA KEV) Joomla 2026

CISA catalog entry

Product

Page Builder

Vendor

Joomlack

Added to KEV

2026-07-07

Remediation due

2026-07-10

What WebPulse reported · 1 analysis

Joomla Page Builder Flaw Lands on CISA's Actively Exploited Vulnerability List

CVE-2026-56290 allows unauthenticated file uploads on Joomla sites — CISA confirms active exploitation.

July 8, 2026

View CVE-2026-56290 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2026-9082 CVE-2026-3844 CVE-2026-48908 CVE-2026-48907 CVE-2023-23752 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548