Skip to content
CISA Known Exploited Vulnerability

CVE-2026-56290

Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.

⚠ Actively exploited (CISA KEV) Joomla 2026
CISA catalog entry
Product
Page Builder
Vendor
Joomlack
Added to KEV
2026-07-07
Remediation due
2026-07-10
What WebPulse reported · 1 analysis
Joomla Page Builder Flaw Lands on CISA's Actively Exploited Vulnerability List

CVE-2026-56290 allows unauthenticated file uploads on Joomla sites — CISA confirms active exploitation.

July 8, 2026
View CVE-2026-56290 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-9082 CVE-2026-3844 CVE-2026-48907 CVE-2026-48908 CVE-2023-23752 CVE-2026-8206 CVE-2026-50549 CVE-2026-50548