<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 28 Sep 2026 07:37:08 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-65891 — Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function…</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-65891</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; joomlacontenteditor.net Joomla Content Editor (JCE) extension for Joomla&lt;/p&gt;
&lt;p&gt;Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) &amp;lt; 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; joomlacontenteditor.net Joomla Content Editor (JCE) extension for Joomla&lt;/p&gt;
&lt;p&gt;Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) &amp;lt; 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-65891</guid>
    </item>
  </channel>
</rss>
