{"vulnerability": "cve-2026-48907", "sightings": [{"uuid": "6b7e6a22-424d-4bc7-9c98-ac134b7cacf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/smtp_sendgrid_aws_office365/280", "content": "\ud83d\udea8 CVE-2026-48907 \u2013 Joomla JCE Unauthenticated RCE Scanner\n\n\ud83d\udd25 Vulnerability Details\n\u2022 CVE: CVE-2026-48907\n\u2022 Product: Joomla JCE (Joomla Content Editor)\n\u2022 Severity: CVSS 10.0 (Critical)\n\u2022 Impact: Unauthenticated Remote Code Execution (RCE)\n\nHow to Use  :\npython3 masta.py -f targets.txt\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udee0 By @cobra_securitytools\n\ud83d\udce2 Join @smtp_sendgrid_aws_office365\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501", "creation_timestamp": "2026-08-02T21:14:35.733572Z"}, {"uuid": "94faa37c-2ec8-461e-977b-c0f981719e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/smtp_sendgrid_aws_office365/280", "content": "\ud83d\udea8 CVE-2026-48907 \u2013 Joomla JCE Unauthenticated RCE Scanner\n\n\ud83d\udd25 Vulnerability Details\n\u2022 CVE: CVE-2026-48907\n\u2022 Product: Joomla JCE (Joomla Content Editor)\n\u2022 Severity: CVSS 10.0 (Critical)\n\u2022 Impact: Unauthenticated Remote Code Execution (RCE)\n\nHow to Use  :\npython3 masta.py -f targets.txt\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udee0 By @cobra_securitytools\n\ud83d\udce2 Join @smtp_sendgrid_aws_office365\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501", "creation_timestamp": "2026-08-03T01:01:23.546917Z"}, {"uuid": "393e0f07-9525-499e-a6ca-17d6c8c68f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/true_secator/8465", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Solar 4RAYS \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n\u0412\u043e \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 681 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 PoC. \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u043e 571. \u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 2026 \u0433\u043e\u0434\u0430, \u043d\u043e \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 2025, \u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u044b 89 \u00ab\u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 Solar 4RAYS \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0432\u0441\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u043d\u0438\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.\n\n\u0421\u0440\u0435\u0434\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0432\u044b\u0432\u043e\u0434\u043e\u0432:\n\n- \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043d\u0430 59,8%: \u0441 426 \u0434\u043e 681. \u0422\u0430\u043a\u043e\u0439 \u0440\u043e\u0441\u0442 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u043a\u0430\u043a \u0441\u0435\u0437\u043e\u043d\u043d\u044b\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c, \u0442\u0430\u043a \u0438 \u0442\u0435\u043c, \u0447\u0442\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b \u043f\u0440\u0438\u043d\u0435\u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Linux \u0438 Windows.\n\n- \u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0438\u043c\u0435\u043b\u0438 83,84% \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u0430\u043a \u0438 \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n- \u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b 7,9 \u0431\u0430\u043b\u043b\u0430. \u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 - 8,1.\n\n- 90,2% \u0432\u0441\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 HTTP. \u0411\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0439 \u00ab\u043f\u0440\u0435\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00bb - TCP (1,23%).\n\n- \u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0440\u043e\u0432\u043d\u044f Critical \u0438 High \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0442 73,5% \u043e\u0442 \u043e\u0431\u0449\u0435\u0439 \u043c\u0430\u0441\u0441\u044b \u0432\u0441\u0435\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u044d\u0442\u043e\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b 72,06%.\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438 \u0442\u0435\u043c \u0434\u043b\u044f CMS WordPress \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 17,9%. \u0414\u043e\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u044a\u0435\u043c\u0435 \u0443\u043f\u0430\u043b\u0430 \u043d\u0430 \u0434\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u043d\u0442\u043d\u044b\u0445 \u043f\u0443\u043d\u043a\u0442\u0430 \u0432 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c.\n\n- \u041d\u0430 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c 4,83% \u0432\u0441\u0435\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0440\u0435\u0434\u043d\u044f\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c 8.\n\n- \u0432 \u0422\u043e\u043f-5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u0432\u044b\u0448\u0435\u0434\u0448\u0438\u0445 PoC \u0432\u043e\u0448\u043b\u0438: CVE-2026-41940 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 cPanel), CVE-2026-42945 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438\u00bb \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ngx_http_rewrite_module \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX), CVE-2026-48907 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Joomla Content Editor (JCE) \u0434\u043b\u044f CMS Joomla), CVE-2026-34197 (RCE \u0432 \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Apache ActiveMQ Classic), CVE-2026-8181 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Burst Statistics \u0434\u043b\u044f WordPress).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Solar 4RAYS, \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0430 \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0441\u043e\u0444\u0442\u0435 \u043e\u0442 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u043a \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0443 \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043c\u0430\u043b\u043e. \u0421\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0433\u043e\u0434\u0430 \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f, \u0438\u0445 \u0441\u0442\u0430\u043b\u043e \u043f\u043e\u0447\u0442\u0438 \u0432\u0434\u0432\u043e\u0435 \u0431\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c \u0440\u0430\u043d\u0435\u0435.\n\nWordpress, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u0438 \u0440\u0430\u0437\u0432\u0438\u0442\u043e\u0441\u0442\u044c\u044e \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u00ab\u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c\u00bb \u043f\u043e \u0447\u0438\u0441\u043b\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u041f\u041e.\n\n\u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u0441\u0442\u0430\u043b\u043e \u044f\u0441\u043d\u043e, \u0447\u0442\u043e \u00ab\u0432\u043e\u0432\u0440\u0435\u043c\u044f\u00bb \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0443\u0436\u043d\u043e \u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e. \n\n\u0427\u0430\u0441\u0442\u043e \u0433\u043b\u0430\u0432\u043d\u043e\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435. \u0414\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0430\u0441\u043f\u0435\u043a\u0442\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0432 99% \u0441\u043b\u0443\u0447\u0430\u0435\u0432. \u041d\u043e \u0431\u044b\u0432\u0430\u0435\u0442 \u0442\u043e\u0442 \u0441\u0430\u043c\u044b\u0439 \u043e\u0434\u0438\u043d \u043f\u0440\u043e\u0446\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0435\u0447\u043d\u043e \u0432\u0441\u0435 \u043f\u043e\u0440\u0442\u0438\u0442.\n\n\u0412 \u044d\u0442\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 supply-chain-\u0430\u0442\u0430\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 Axios \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0439 \u0432\u0435\u0441\u043d\u043e\u0439. \u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 \u0440\u0443\u0431\u0435\u0436\u0435 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0438 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0438 \u0441\u0442\u0430\u0442\u044c\u0438, \u0433\u043e\u0432\u043e\u0440\u044f\u0449\u0438\u0435 \u043e\u0431 Axios Supply Chain Attack.\n\n\u0410\u0442\u0430\u043a\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e \u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0448\u0435\u0441\u0442\u044c \u0441\u0442\u0430\u0434\u0438\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0441\u043e\u0432\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0447\u0430\u0441\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0442\u0438\u0442\u044c \u0432 \u0418\u0411-\u0441\u0444\u0435\u0440\u0435, \u043a\u043e\u0433\u0434\u0430 \u0440\u0435\u0447\u044c \u0437\u0430\u0445\u043e\u0434\u0438\u0442 \u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438) \u0441\u0442\u0430\u043b\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u043c \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435 \u043d\u0443\u0436\u043d\u043e, - \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u043d\u0430\u043a\u0430\u043f\u043b\u0438\u0432\u0430\u044e\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 CVE \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u0432\u044b\u0432\u043e\u0434: \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 (\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b, \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b), \u043d\u043e \u043d\u0435 \u0434\u043b\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 production-\u0441\u0440\u0435\u0434\u0435.\n\n\u0414\u043b\u044f \u043d\u0438\u0445 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043e\u0442\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0440\u0443\u0447\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c: \u0438\u0437\u0443\u0447\u0430\u0442\u044c changelog, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 staging-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043a\u0430\u0442\u043a\u043e\u0439 \u0432 \u043f\u0440\u043e\u0434.", "creation_timestamp": "2026-07-31T14:00:04.204876Z"}, {"uuid": "98e0f84d-2b71-4bf5-82ff-3610ad56d6e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mrxahvxh7w2q", "content": "Rapid reaction gets you ahead. 6 days before CISA added CVE-2026-48907, a critical Remote Code Execution vulnerability in Joomla Content Editor (JCE), to KEV. watchTowr clients were aware of their exposure.\n\nReach ou\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2083203285276672382)", "creation_timestamp": "2026-07-31T15:11:53.417479Z"}, {"uuid": "b9d970c1-2133-407c-8ee1-fd4f98c25235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/true_secator/8465", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Solar 4RAYS \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n\u0412\u043e \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 681 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 PoC. \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u043e 571. \u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 2026 \u0433\u043e\u0434\u0430, \u043d\u043e \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 2025, \u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u044b 89 \u00ab\u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 Solar 4RAYS \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0432\u0441\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u043d\u0438\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.\n\n\u0421\u0440\u0435\u0434\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0432\u044b\u0432\u043e\u0434\u043e\u0432:\n\n- \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043d\u0430 59,8%: \u0441 426 \u0434\u043e 681. \u0422\u0430\u043a\u043e\u0439 \u0440\u043e\u0441\u0442 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u043a\u0430\u043a \u0441\u0435\u0437\u043e\u043d\u043d\u044b\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c, \u0442\u0430\u043a \u0438 \u0442\u0435\u043c, \u0447\u0442\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b \u043f\u0440\u0438\u043d\u0435\u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Linux \u0438 Windows.\n\n- \u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0438\u043c\u0435\u043b\u0438 83,84% \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u0430\u043a \u0438 \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n- \u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b 7,9 \u0431\u0430\u043b\u043b\u0430. \u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 - 8,1.\n\n- 90,2% \u0432\u0441\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 HTTP. \u0411\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0439 \u00ab\u043f\u0440\u0435\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00bb - TCP (1,23%).\n\n- \u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0440\u043e\u0432\u043d\u044f Critical \u0438 High \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0442 73,5% \u043e\u0442 \u043e\u0431\u0449\u0435\u0439 \u043c\u0430\u0441\u0441\u044b \u0432\u0441\u0435\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u044d\u0442\u043e\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b 72,06%.\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438 \u0442\u0435\u043c \u0434\u043b\u044f CMS WordPress \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 17,9%. \u0414\u043e\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u044a\u0435\u043c\u0435 \u0443\u043f\u0430\u043b\u0430 \u043d\u0430 \u0434\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u043d\u0442\u043d\u044b\u0445 \u043f\u0443\u043d\u043a\u0442\u0430 \u0432 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c.\n\n- \u041d\u0430 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c 4,83% \u0432\u0441\u0435\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0440\u0435\u0434\u043d\u044f\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c 8.\n\n- \u0432 \u0422\u043e\u043f-5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u0432\u044b\u0448\u0435\u0434\u0448\u0438\u0445 PoC \u0432\u043e\u0448\u043b\u0438: CVE-2026-41940 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 cPanel), CVE-2026-42945 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438\u00bb \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ngx_http_rewrite_module \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX), CVE-2026-48907 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Joomla Content Editor (JCE) \u0434\u043b\u044f CMS Joomla), CVE-2026-34197 (RCE \u0432 \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Apache ActiveMQ Classic), CVE-2026-8181 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Burst Statistics \u0434\u043b\u044f WordPress).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Solar 4RAYS, \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0430 \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0441\u043e\u0444\u0442\u0435 \u043e\u0442 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u043a \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0443 \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043c\u0430\u043b\u043e. \u0421\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0433\u043e\u0434\u0430 \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f, \u0438\u0445 \u0441\u0442\u0430\u043b\u043e \u043f\u043e\u0447\u0442\u0438 \u0432\u0434\u0432\u043e\u0435 \u0431\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c \u0440\u0430\u043d\u0435\u0435.\n\nWordpress, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u0438 \u0440\u0430\u0437\u0432\u0438\u0442\u043e\u0441\u0442\u044c\u044e \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u00ab\u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c\u00bb \u043f\u043e \u0447\u0438\u0441\u043b\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u041f\u041e.\n\n\u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u0441\u0442\u0430\u043b\u043e \u044f\u0441\u043d\u043e, \u0447\u0442\u043e \u00ab\u0432\u043e\u0432\u0440\u0435\u043c\u044f\u00bb \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0443\u0436\u043d\u043e \u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e. \n\n\u0427\u0430\u0441\u0442\u043e \u0433\u043b\u0430\u0432\u043d\u043e\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435. \u0414\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0430\u0441\u043f\u0435\u043a\u0442\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0432 99% \u0441\u043b\u0443\u0447\u0430\u0435\u0432. \u041d\u043e \u0431\u044b\u0432\u0430\u0435\u0442 \u0442\u043e\u0442 \u0441\u0430\u043c\u044b\u0439 \u043e\u0434\u0438\u043d \u043f\u0440\u043e\u0446\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0435\u0447\u043d\u043e \u0432\u0441\u0435 \u043f\u043e\u0440\u0442\u0438\u0442.\n\n\u0412 \u044d\u0442\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 supply-chain-\u0430\u0442\u0430\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 Axios \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0439 \u0432\u0435\u0441\u043d\u043e\u0439. \u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 \u0440\u0443\u0431\u0435\u0436\u0435 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0438 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0438 \u0441\u0442\u0430\u0442\u044c\u0438, \u0433\u043e\u0432\u043e\u0440\u044f\u0449\u0438\u0435 \u043e\u0431 Axios Supply Chain Attack.\n\n\u0410\u0442\u0430\u043a\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e \u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0448\u0435\u0441\u0442\u044c \u0441\u0442\u0430\u0434\u0438\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0441\u043e\u0432\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0447\u0430\u0441\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0442\u0438\u0442\u044c \u0432 \u0418\u0411-\u0441\u0444\u0435\u0440\u0435, \u043a\u043e\u0433\u0434\u0430 \u0440\u0435\u0447\u044c \u0437\u0430\u0445\u043e\u0434\u0438\u0442 \u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438) \u0441\u0442\u0430\u043b\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u043c \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435 \u043d\u0443\u0436\u043d\u043e, - \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u043d\u0430\u043a\u0430\u043f\u043b\u0438\u0432\u0430\u044e\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 CVE \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u0432\u044b\u0432\u043e\u0434: \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 (\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b, \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b), \u043d\u043e \u043d\u0435 \u0434\u043b\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 production-\u0441\u0440\u0435\u0434\u0435.\n\n\u0414\u043b\u044f \u043d\u0438\u0445 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043e\u0442\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0440\u0443\u0447\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c: \u0438\u0437\u0443\u0447\u0430\u0442\u044c changelog, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 staging-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043a\u0430\u0442\u043a\u043e\u0439 \u0432 \u043f\u0440\u043e\u0434.", "creation_timestamp": "2026-08-01T00:00:29.975092Z"}, {"uuid": "defa44a6-aa35-4e07-8a99-8ed3d36bf0df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/WcrzV29axaMqvAyqM500IhexAvA_wc8Hn5on5ZVuAzJtS8U", "content": "", "creation_timestamp": "2026-08-08T00:04:27.716481Z"}, {"uuid": "2a4d7abf-533f-43bd-9032-cb2a67d79532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/Q9l_khQPCrK3-pFmIQSwPbzLcXParwYcI8FNGTh0OV54rzY", "content": "", "creation_timestamp": "2026-08-08T00:04:27.840861Z"}, {"uuid": "7c774fdc-95db-4f83-be5e-6402029a2adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnjqzbo4aw2q", "content": "CVE-2026-48907 - Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla\nCVE ID : CVE-2026-48907\n \n Published : June 5, 2026, 8:16 a.m. | 16\u00a0minutes ago\n \n Description : A vulnerability in the JCE editor extension for Joomla allows the cr...", "creation_timestamp": "2026-06-05T08:49:52.768446Z"}, {"uuid": "2c752e5e-0b1c-4309-9f6a-27402122a5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnjqzbo4aw2q", "content": "CVE-2026-48907 - Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla\nCVE ID : CVE-2026-48907\n \n Published : June 5, 2026, 8:16 a.m. | 16\u00a0minutes ago\n \n Description : A vulnerability in the JCE editor extension for Joomla allows the cr...", "creation_timestamp": "2026-06-05T08:49:52.767565Z"}, {"uuid": "4ffc6e37-b1ef-4097-95f9-254c07c47c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48907", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116696680833602850", "content": "\ud83d\udea8 CRITICAL: Joomla Content Editor (JCE) vuln (CVE-2026-48907) allows unauthenticated PHP upload & exec (v1.0.0 \u2013 2.9.99.4). No patch yet \u2014 restrict or disable JCE & monitor systems. Details: https://radar.offseq.com/threat/cve-2026-48907-cwe-284-improper-access-control-in--ff15bdc3 #OffSeq #Joomla #Vuln #InfoSec", "creation_timestamp": "2026-06-05T09:00:38.352983Z"}, {"uuid": "d9f7b01a-0eb7-43c8-8ec7-9174455b385e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48907", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnjrmkgh2423", "content": "Joomla Content Editor (JCE) CRITICAL vuln lets unauth users upload & run PHP (v1.0.0 \u2013 2.9.99.4). No patch yet \u2014 restrict or disable JCE + monitor activity. Stay updated: https://radar.offseq.com/threat/cve-2026-48907-cwe-284-improper-access-control-in--ff15bdc3 #OffSeq #Joomla #SecurityAlert", "creation_timestamp": "2026-06-05T09:00:39.902780Z"}, {"uuid": "75ff94c7-b57c-4db5-a91b-b18ffc562869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48907", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnjrmkgh2423", "content": "Joomla Content Editor (JCE) CRITICAL vuln lets unauth users upload & run PHP (v1.0.0 \u2013 2.9.99.4). No patch yet \u2014 restrict or disable JCE + monitor activity. Stay updated: https://radar.offseq.com/threat/cve-2026-48907-cwe-284-improper-access-control-in--ff15bdc3 #OffSeq #Joomla #SecurityAlert", "creation_timestamp": "2026-06-05T09:00:39.901516Z"}, {"uuid": "77ba11c9-dd08-4b44-881a-d31629e80f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-48907.yaml", "content": "", "creation_timestamp": "2026-06-11T15:38:57.000000Z"}, {"uuid": "6e7da8eb-ecaa-4cc9-b4bd-6755e44a67b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mod2vypzwg22", "content": "CVE-2026-48907 (CVSS 100): The Unauthenticated RCE That Turns Your Joomla Site into a Pwned Statistic +\u00a0Video\n\nIntroduction: A new zero\u2011click Remote Code Execution (RCE) vulnerability has been discovered in the popular Joomla Content Editor (JCE) extension. Tracked as CVE\u20112026\u201148907 and carrying a\u2026", "creation_timestamp": "2026-06-15T10:23:34.069509Z"}, {"uuid": "abe88bc5-c055-4d63-ad53-c7f0a1f6cfac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://www.acn.gov.it/portale/w/joomla-jce-sfruttamento-attivo-in-rete-della-cve-2026-48907", "content": "Rilevato sfruttamento attivo in rete della CVE-2026-48907 \u2013 gi\u00e0 sanata dal vendor \u2013 presente nel plugin Joomla Content Editor (JCE) estensione per il noto CMS Joomla! utilizzata per la gestione avanzata dei contenuti, Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato remoto di eseguire codice arbitrario sui sistemi interessati.", "creation_timestamp": "2026-06-15T11:32:15.000000Z"}, {"uuid": "e1ada4c7-b083-447a-b53c-efd5a5ba9682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mogkt2xx362u", "content": "\ud83d\uded1 CVE-2026-48907\nWidget Factory Joomla Content Editor\nCVSS 10.0 / EPSS 1% / KEV \u2705\nTL;DR: A vulnerability in the JCE editor extension for Joomla allows the creat\u2026\nhttps://cvesentinel.com/report/CVE-2026-48907?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-06-16T19:46:14.387856Z"}, {"uuid": "f99098c7-a2d3-4114-be78-1866ace92fb9", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b71394c1-e100-4ea5-9f11-216c0892d268", "content": "", "creation_timestamp": "2026-06-16T20:00:01.385475Z"}, {"uuid": "29e14271-14a8-4754-9fc4-a196849370e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mogoxjqp6j2k", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0616)\n\n\u26a0\ufe0f CVE-2026-48907 - Widget Factory Joomla Content Editor Improper Access Control Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-06-16T21:00:18.882316Z"}, {"uuid": "1921f669-6a0a-4b81-96ff-bc620e134365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mohosgpgxs24", "content": "CISA warns of active exploitation of Joomla JCE vulnerability CVE-2026-48907; update to version 2.9.99.5 now. #Cybersecurity #Joomla #CISA #Vulnerability #PHP #CMS thedailytechfeed.com/cisa-alerts-...", "creation_timestamp": "2026-06-17T06:30:08.689925Z"}, {"uuid": "fba7ff49-102b-4845-b96c-d0395d9a4b11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mohoxuuzhd2v", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (Jun 16)\n\nCVE-2026-48907 Widget Factory Joomla\u30b3\u30f3\u30c6\u30f3\u30c4\u30a8\u30c7\u30a3\u30bf\u30fc\u306e\u4e0d\u9069\u5207\u306a\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-06-17T06:33:10.225340Z"}, {"uuid": "7812cb5b-d5bb-41cb-a83c-04fc8f074b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor (JCE) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\n\nThe vulnerability, tracked as CVE-2026-48907 (CVSS score: 10.0), is a case of improper access control that could facilitate arbitrary", "creation_timestamp": "2026-06-17T03:50:46.000000Z"}, {"uuid": "857e3d31-95f4-4c42-a1bc-a988ec53b93a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mohx74eegi2l", "content": "Joomla JCE CVE-2026-48907 and LiteSpeed cPanel CVE-2026-54420 are being actively exploited, enabling file uploads, PHP execution, and possible root escalation on shared hosting servers. #Joomla #LiteSpeed #CISA", "creation_timestamp": "2026-06-17T09:00:23.896971Z"}, {"uuid": "8c38ce12-9dc7-414b-a1f5-8531c987f339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mohsppl7pam2", "content": "CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution TheHackerNews CISA added CVE-2026-48907 in Joomla JCE to its KEV catalog after active exploitation; fixes are due by Jun...\n\n#Security #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-17T07:41:20.325740Z"}, {"uuid": "2d7320f2-9f86-4573-8fe0-50a51bbbd253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mohvil276i2h", "content": "Joomla JCE\u306bPHP\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u8a31\u3059\u8106\u5f31\u6027(CVE-2026-48907)\u304c\u767a\u898b\u3055\u308c\u3001CISA\u304c\u6ce8\u610f\u559a\u8d77\u3002\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-06-17T08:29:53.827874Z"}, {"uuid": "68a5ef0e-22cd-469d-ba9f-7e9d975a7c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/rxerium.com/post/3moi6zikyzp2k", "content": "\ud83d\udea8 Critical improper access control vulnerability tagged CVE-2026-48907, affecting Joomla Content Editor is seeing active exploitation in the wild (reported by CISA)\n\nVulnerability detection script:\ngithub.com/rxerium/rxer...\n\nPatches and mitigations:\nwww.sentinelone.com/vulnerabilit...", "creation_timestamp": "2026-06-17T11:20:26.070487Z"}, {"uuid": "8f969ee7-97ac-4506-bd0a-165bb98c0ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3moibayxngn24", "content": "Joomla Widget Factory JCE: CISA lists CVE-2026-48907 (CVSS 10.0) as actively exploited. Patch immediately and review for PHP code execution attempts. #Cybersecurity #Vulnerability #ThreatIntel\n\nSource: https://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.html", "creation_timestamp": "2026-06-17T12:00:57.090849Z"}, {"uuid": "3ba0b8f9-85a8-4f56-a4b4-975d1f729297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3moidu2x2tc2d", "content": "Forecast: expect more AI package-ecosystem targeting: account takeovers, poisoned postinstall hooks, helper-package compromises. KEV side-note: patch exposed Joomla/JCE CVE-2026-48907 now. Refs: Microsoft X, Mastra incident report, Endor Labs, CISA KEV.", "creation_timestamp": "2026-06-17T12:46:52.010098Z"}, {"uuid": "3613b729-9507-4279-9db8-71565aa35188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3moidu2xbo22d", "content": "Forecast: expect more AI package-ecosystem targeting: account takeovers, poisoned postinstall hooks, helper-package compromises. KEV side-note: patch exposed Joomla/JCE CVE-2026-48907 now. Refs: Microsoft X, Mastra incident report, Endor Labs, CISA KEV.", "creation_timestamp": "2026-06-17T12:46:53.143029Z"}, {"uuid": "5ba52d4b-5e13-4ef9-9e62-7557ec20380b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3moidu2xcnc2d", "content": "Forecast: expect more AI package-ecosystem targeting: account takeovers, poisoned postinstall hooks, helper-package compromises. KEV side-note: patch exposed Joomla/JCE CVE-2026-48907 now. Refs: Microsoft X, Mastra incident report, Endor Labs, CISA KEV.", "creation_timestamp": "2026-06-17T12:46:54.235120Z"}, {"uuid": "74bc999d-01fe-436b-8e2a-67f85581ce21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3moidu2xcnd2d", "content": "Forecast: expect more AI package-ecosystem targeting: account takeovers, poisoned postinstall hooks, helper-package compromises. KEV side-note: patch exposed Joomla/JCE CVE-2026-48907 now. Refs: Microsoft X, Mastra incident report, Endor Labs, CISA KEV.", "creation_timestamp": "2026-06-17T12:46:55.385274Z"}, {"uuid": "cf1b9f58-32bf-4598-8e50-791b2d56ec47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3moidu2xelt2d", "content": "Forecast: expect more AI package-ecosystem targeting: account takeovers, poisoned postinstall hooks, helper-package compromises. KEV side-note: patch exposed Joomla/JCE CVE-2026-48907 now. Refs: Microsoft X, Mastra incident report, Endor Labs, CISA KEV.", "creation_timestamp": "2026-06-17T12:46:56.483859Z"}, {"uuid": "f04bd0eb-6fd9-4a2a-b9e2-f17b247de07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3moiq64m53y2u", "content": "URGENT: CVE-2026-48907 is seeing active exploitation in Joomla! JCE extensions. This critical RCE flaw allows unauthenticated attackers to take full control. Read our executive remediation brief to harden your environment now.\nhttps://thecybermind.co/ic6z\n#CyberSecurity #Joomla #Infosec #KEV", "creation_timestamp": "2026-06-17T16:27:13.799834Z"}, {"uuid": "be64f704-adb9-46ff-9930-ca1f047f036a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3moir6ocvvy2n", "content": "CISA ordered federal agencies to patch CVE-2026-48907 by Friday. The max-severity JCE plugin flaw in Joomla can let attackers upload and run PHP code. Fix: JCE Pro 2.9.99.6. #Joomla #CISA #JCE", "creation_timestamp": "2026-06-17T16:45:26.381952Z"}, {"uuid": "9ee4d054-3a56-4d23-aa5d-e345acd12d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/cesnet-certs.mastodonczech.cz.ap.brid.gy/post/3moiyu6gmju42", "content": "[[TLP:CLEAR] JCE opravuje kritickou aktivn\u011b zneu\u017e\u00edvanou zranitelnost]\n\nCISA za\u0159adila kritickou zranitelnost (CVE-2026-48907) v Joomla Content Editor (JCE) do katalogu aktivn\u011b zneu\u017e\u00edvan\u00fdch zranitelnost\u00ed \u2b07\ufe0f. Skript pro PoC naleznete na \u2b07\ufe0f.\n\nOdkaz na webovou verzi cel\u00e9ho reportu [\u2026]", "creation_timestamp": "2026-06-17T19:02:48.253975Z"}, {"uuid": "2c1c3b84-5807-403b-993d-c907dac79228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3moj6czenx42m", "content": "Alert: CVE-2026-48907. A severe access control flaw in Widget Factory Joomla Content Editor allows unauthenticated PHP script execution. Lock down your CMS. Read our tactical engineering runbook for full IOCs and endpoint hardening steps. https://thecybermind.co/unjv\n\n\ud83d\udee1\ufe0f #CyberSecurity #CVE\u2026", "creation_timestamp": "2026-06-17T20:40:30.487888Z"}, {"uuid": "c40c7860-bd69-4560-aa63-2cc7020a13dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojaburz2e2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:40.330176Z"}, {"uuid": "6fbc5272-84ea-436b-a560-df9a70b9ee03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabus7v42b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:40.875813Z"}, {"uuid": "4645e685-08f5-476b-a8c6-6ce314574a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabusbtm2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:41.409008Z"}, {"uuid": "784192cb-a639-476d-9fff-8c2e7b2a881b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabuscsu2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:41.930656Z"}, {"uuid": "6d23e02a-e4ea-431e-98cf-6f186bd8d2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabusds42b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:42.536635Z"}, {"uuid": "89f06e64-d2a7-41bc-8c7b-c10d30832f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabusere2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:43.068487Z"}, {"uuid": "30c26aa0-4255-466d-8351-829433c61aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabushp42b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:43.602390Z"}, {"uuid": "e99e17f3-bca3-4fb2-be8f-275d5eb5634b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabushp52b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:44.144872Z"}, {"uuid": "752f28e4-f4fc-4168-9f51-59a09ec51ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabusiof2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:44.770224Z"}, {"uuid": "a622d88a-9c00-470c-b6f9-fc16e8fbbde5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gfzf2b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:42.655264Z"}, {"uuid": "75895b36-3960-4e4f-a93d-b8e1a46b2afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gmu52b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:43.693974Z"}, {"uuid": "f5c896a2-f446-4dd7-b8dc-a4bbd1513df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gntf2b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:44.846917Z"}, {"uuid": "d0ea7159-2b11-4312-82d6-cc2bb993c540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gosn2b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:45.909498Z"}, {"uuid": "48dbcdf9-5a54-477e-a825-fdd93db4bd4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gprv2b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:47.172205Z"}, {"uuid": "ea2b1c3d-40c0-4632-9eb3-fed45d1c05ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gqr52b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:48.237933Z"}, {"uuid": "7f3c6c20-4879-4dff-af8d-5a6f67d6a1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gqr62b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:49.403795Z"}, {"uuid": "77f44c1c-cce5-4019-b7d8-ba29a5be04bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gspo2b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:50.484915Z"}, {"uuid": "22ba0403-e53a-42df-a1ba-97c7d5ddecd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gtow2b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:51.492949Z"}, {"uuid": "f96ec00e-7860-40df-96a3-20995ed8c555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7tr7k22e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:46.708222Z"}, {"uuid": "9d79b05c-8279-42ef-8341-248bc685b1e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7tqxq22e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:45.254937Z"}, {"uuid": "b8c3e5f1-4c48-4426-9179-29c1499c621e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7tr6ks2e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:46.032053Z"}, {"uuid": "f1a6c097-2754-45fa-9ebc-e84e782dbb49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7trbil2e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:48.703466Z"}, {"uuid": "1da7445f-5308-4a63-a423-f680e87c7ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7trajc2e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:47.411164Z"}, {"uuid": "fc67b73f-f91f-4a0c-be6b-489e81f0085b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7trajd2e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:48.074860Z"}, {"uuid": "75902e0e-de22-4cca-83c4-9797e4d11e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7trbim2e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:49.492840Z"}, {"uuid": "ac763424-1a5a-4ef6-87ee-7de539f441f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/WWWHczf5cNnqk0Vv0lWj7tyigbd43npSKH3-Z1auyWOYzQ", "content": "", "creation_timestamp": "2026-06-17T07:07:14.000000Z"}, {"uuid": "d6ccdbc4-5fa9-43a3-8648-94439dc78833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/Twzxtbvyqic9grgE7JaZrbs3i9BOrZG8PBBvMyWgrTB7Ya8", "content": "", "creation_timestamp": "2026-06-09T19:00:13.000000Z"}, {"uuid": "15d7ad7f-d022-4b09-a704-9a283c601423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/avQcqITCN0CdPqbu_zPd1c2U29MoQRx_NSjCudrYTZic4II", "content": "", "creation_timestamp": "2026-06-09T23:00:05.000000Z"}, {"uuid": "32ef3d2a-c5e1-4364-bfa1-9714b397e3bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/fCG7WKzSZ3J5MxWk4q33cwgoeWrsZeYEI50sN5k5RlUMOc4", "content": "", "creation_timestamp": "2026-06-11T23:00:06.000000Z"}, {"uuid": "753f7a0e-9a11-4704-894f-748a4ae5d695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/YXCyRYfB5puG4zVuSsqFt0CqpucG34vnwOdsG1DKfw8sOUE", "content": "", "creation_timestamp": "2026-06-12T11:00:12.000000Z"}, {"uuid": "3e7ca6fb-f623-4e30-9f5a-abe3bdb2204e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/dt0AF8_y_UrMLbm3nbIzl56WQ7K0nt860xLQHDp_bOOwKbw", "content": "", "creation_timestamp": "2026-06-13T15:00:16.000000Z"}, {"uuid": "15130c9e-0108-46d4-8a10-7d12bfb2c4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/ycLXaxSGB-_ldONYQWC7S6J3lanIcH0nsjxJAaBzeM5ug0Y", "content": "", "creation_timestamp": "2026-06-12T15:00:07.000000Z"}, {"uuid": "d2529373-f022-451c-aab8-d0416873f3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/qE6f29_aVOJA4ORgQTQStDqLz7TqoxzfPbinGVmKV8o4EU8", "content": "", "creation_timestamp": "2026-06-11T15:00:13.000000Z"}, {"uuid": "89fd45b6-5d55-400c-b984-fc063be6e674", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/54492054-44e9-4990-9354-de0b7df1fce0", "content": "", "creation_timestamp": "2026-06-19T12:45:05.539982Z"}, {"uuid": "4a448ac9-88d0-4816-bf9a-9781eb1c4034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Channel/2139", "content": "CVE-2026-48907 \u2014 Joomla JCE Extension Unauthenticated RCE", "creation_timestamp": "2026-08-10T05:00:04.707347Z"}, {"uuid": "a6ac93fe-3fbe-48c8-82e9-ad41df283823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Channel/2136", "content": "MASS Exploit Joomla [python3] \ud83e\udd8a\n\nFor:\nCVE-2026-48908 [SP Page Builder]\nCVE-2026-48907 [JCE]\n\nRun:\npython Rce-joomla.py listjoomla.txt", "creation_timestamp": "2026-08-10T05:00:05.023664Z"}, {"uuid": "be2119a7-8a9f-469d-9801-bb5f7451eb53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3monw2r2oet2r", "content": "CVE-2026-48907 and LiteSpeed cPanel Plugin Flaws Come Under Active Attack", "creation_timestamp": "2026-06-19T17:56:01.597794Z"}, {"uuid": "b5a2bdbe-1901-407f-860d-62855ee27588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mooobp7it32m", "content": "Any website running the Joomla Content Editor extension can be taken over right now. CISA added CVE-2026-48907, a maximum-severity flaw scoring 10.0, to its known-exploited list. Unauthenticated attackers create editor profiles, then upload and run PHP code. Public exploit. Fix: JCE 2.9.99.5.", "creation_timestamp": "2026-06-20T01:09:24.591270Z"}, {"uuid": "c402fe20-33f0-45a8-8307-aa900b94cb7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mota7ywdm226", "content": "CVE-2026-48907 (CVSS 10.0) \u2014 Joomla JCE plugin: upload rogue editor profile \u2192 PHP web shell. Exploitation automatizzata ITW. CISA KEV, deadline FCEB: oggi. Patch: JCE 2.9.99.5. #Joomla #CISAKEV", "creation_timestamp": "2026-06-21T20:41:14.299105Z"}, {"uuid": "98b89684-f7f7-4e4f-954f-5305c5d7d716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou7kezi552n", "content": "\ud83d\udea8  ALERT: CVE-2026-48907\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Jce\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: N", "creation_timestamp": "2026-06-22T06:01:49.001066Z"}, {"uuid": "9674ba59-37d6-4486-96f5-bf5185975b68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mouwfnax522r", "content": "\ud83d\udea8 CISA just added another Joomla bug to its active exploits list. That's three this year.\n\nCVE-2026-48907.\n\nhttps://www.yazoul.net/malware/mirai-2026-06/reports/2026-06-21/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-06-22T12:50:45.103170Z"}, {"uuid": "8c0368a3-e38e-45b5-a2eb-d1773ad895aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mox7eshbps2k", "content": "\u26a0\ufe0f CISA just added another Joomla bug to its exploited list. How many are still unpatched in your environment?\n\nCVE-2026-48907.\n\nhttps://www.yazoul.net/malware/mirai-2026-06/reports/2026-06-21/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-06-23T10:36:39.988959Z"}, {"uuid": "604041ed-cc6a-4bca-8035-af1ca5dd5660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48907", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116799252848428119", "content": "Last week we added scanning for Joomla JCE editor extension CVE-2026-48907 vulnerable instances. This RCE vulnerability is exploited in the wild & on US CISA KEV.  4840 vulnerable instances seen 2026-06-22 down from 5146 on 2026-06-19. Top affected: US\nhttps://dashboard.shadowserver.org/statistics/combined/map/?date_range=1&map_type=std&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-48907%2B&data_set=count&scale=log&auto_update=on\nRaw IP data shared in our Vulnerable HTTP reporting https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/ tagged 'cve-2026-48907' filtered by network/constituency\nDashboard Tree Map view: https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=1&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-48907%2B&data_set=count&scale=log&auto_update=on\nPatch info: https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites", "creation_timestamp": "2026-06-23T11:46:03.212247Z"}, {"uuid": "695f232c-6924-48f9-818b-3b5254e44962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3moxddmglwk2b", "content": "Last week we added scanning for Joomla JCE editor extension CVE-2026-48907 vulnerable instances. This RCE vulnerability is exploited in the wild & on US CISA KEV.  4840 vulnerable instances seen 2026-06-22 down from 5146 on 2026-06-19. Top affected: US\n\ndashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-06-23T11:47:42.936658Z"}, {"uuid": "c30790da-9169-4eab-80c7-72e3bfe156e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3moxddqwy2c2b", "content": "Last week we added scanning for Joomla JCE editor extension CVE-2026-48907 vulnerable instances. This RCE vulnerability is exploited in the wild & on US CISA KEV.  4840 vulnerable instances seen 2026-06-22 down from 5146 on 2026-06-19. Top affected: US\n\ndashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-06-23T11:47:43.750103Z"}, {"uuid": "fd24c918-a3bf-4508-85fd-23fed150c9a9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0f2302f3-00e7-4d90-86fc-886701fba25b", "content": "", "creation_timestamp": "2026-06-23T14:02:57.116293Z"}, {"uuid": "708f5606-d759-4e23-bc63-1735743d3003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3moxxxkctdg2v", "content": "Third critical CVE added to CISA's KEV list this month. Same pattern every time.\n\nCVE-2026-48907.\n\nhttps://www.yazoul.net/news/article/cisa-warns-of-actively-exploited-joomla-jce-flaw-allowing-php-code-execution/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-06-23T17:56:38.852227Z"}, {"uuid": "1da2d5f9-c5b2-4bcc-9453-3a777ef61216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mozp5jynyo2p", "content": "\u26a0\ufe0f CISA just added another Joomla bug to its exploited list. This one is already in the wild.\n\nCVE-2026-48907.\n\nhttps://www.yazoul.net/news/article/cisa-warns-of-actively-exploited-joomla-jce-flaw-allowing-php-code-execution/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-06-24T10:24:15.739524Z"}, {"uuid": "1e3c94c5-c6c8-41ea-be50-715c31a3ce9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-vulnerability-joomla-content-editor-extension-jce-patch-immediately", "content": "", "creation_timestamp": "2026-06-25T13:45:05.932377Z"}, {"uuid": "3ffc66d9-5865-4a14-96a0-f9508371bc0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/hookprobe.com/post/3mp545ijkce2p", "content": "\ud83c\udfac How HookProbe Detects CVE-2026-48907: Securing Widget Factory Joomla Content Editor \u2014 AI-native edge security on a $50 Raspberry Pi. #infosec #EdgeSecurity #RaspberryPi", "creation_timestamp": "2026-06-25T18:54:51.892390Z"}, {"uuid": "bb49f64f-31f5-4794-8eb7-4ca93159d43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mpmsrm35me2n", "content": "ChocoPoC Crisis: How a Tasty-Looking Joomla PoC Became a Full-Blown Supply Chain Attack +\u00a0Video\n\nIntroduction: In late June 2026, YesWeHack\u2019s vulnerability intelligence team published an analysis of a critical unauthenticated RCE flaw in the Joomla JCE extension (CVE-2026-48907), including a\u2026", "creation_timestamp": "2026-07-02T00:49:45.480063Z"}, {"uuid": "38c73f44-2804-445c-876f-d45bebb3aa53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Channel/2139", "content": "CVE-2026-48907 \u2014 Joomla JCE Extension Unauthenticated RCE", "creation_timestamp": "2026-08-11T00:00:08.731569Z"}, {"uuid": "37327f20-5db1-4ccd-ab56-6058cb5d5f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Channel/2136", "content": "MASS Exploit Joomla [python3] \ud83e\udd8a\n\nFor:\nCVE-2026-48908 [SP Page Builder]\nCVE-2026-48907 [JCE]\n\nRun:\npython Rce-joomla.py listjoomla.txt", "creation_timestamp": "2026-08-11T00:00:08.882776Z"}, {"uuid": "d58cccaa-8167-42a4-813d-abddf87f62d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mpvvxje66i25", "content": "Another Joomla exploit lands; defenders still pretending patching is a strategy\nPANIC 68% | Lag 0.0h | CISA has added CVE-2026-48907, a Joomla vulnerability, to its active exploitation list, which means \n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-05T15:40:42.419448Z"}, {"uuid": "0bbf7e9c-7e32-4192-be39-3a393bfd2879", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b3395aed-c1a6-41e0-afc5-698af243eb5b", "content": "", "creation_timestamp": "2026-07-06T12:00:01.834759Z"}, {"uuid": "c2f93e5a-36af-4ae3-93de-e9ad920e7c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88354", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ywh-jfellus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-11 13:44:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T07:00:04.695323Z"}, {"uuid": "f4030464-e011-4294-b994-627ea60d9c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88065", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907-Unauthenticated-RCE-in-JCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a webshellseo8\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-09 16:39:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907: Unauthenticated RCE in JCE (Proof Of Concept)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T11:00:03.893960Z"}, {"uuid": "1d8ad0b8-b771-458b-a7cc-01925c27410e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/cKure/16518", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 CVE-2026-48907 \u2014 JoomlaSniper v1.0 released.\n\nUnauthenticated RCE in Joomla JCE Editor (\u22642.9.99.4)\nCVSS 10.0 \u2022 Affects ALL production versions.\n\nFile upload \u2192 PHP execution in /tmp/ \u2014 no auth required.\n\nhttps://github.com/ynsmroztas/JoomlaSniper", "creation_timestamp": "2026-07-12T14:00:07.487078Z"}, {"uuid": "ae44140a-36ef-4410-81e6-e0d3b5cd0a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88065", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907-Unauthenticated-RCE-in-JCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a webshellseo8\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-09 16:39:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907: Unauthenticated RCE in JCE (Proof Of Concept)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:45.588886Z"}, {"uuid": "67dbf6cd-9cd1-4ed4-ae53-2a853e7f0100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/cKure/16518", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 CVE-2026-48907 \u2014 JoomlaSniper v1.0 released.\n\nUnauthenticated RCE in Joomla JCE Editor (\u22642.9.99.4)\nCVSS 10.0 \u2022 Affects ALL production versions.\n\nFile upload \u2192 PHP execution in /tmp/ \u2014 no auth required.\n\nhttps://github.com/ynsmroztas/JoomlaSniper", "creation_timestamp": "2026-07-13T00:00:44.249119Z"}, {"uuid": "d404233b-9534-4212-849d-44a954a7185e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88354", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ywh-jfellus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-11 13:44:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:49.967247Z"}, {"uuid": "6459e8ee-aa41-483c-86c1-9495fdf4ab70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjomc2ue22o", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\nRelease Date June 16, 2026\n\nCVE-2026-48907 Widget Factory Joomla Content Editor Improper Access Control Vulnerability", "creation_timestamp": "2026-07-13T12:22:24.761727Z"}, {"uuid": "9ecc6a66-d451-47ad-af2b-7b4ab84bc811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjox2c7ks2o", "content": "\u300cJoomla\u300d\u5411\u3051\u7de8\u96c6\u30c4\u30fc\u30eb\u300cJCE\u300d\u3001\u8106\u5f31\u6027\u60aa\u7528\u306b\u6ce8\u610f\n\n\u7c73\u5f53\u5c40\u306f\u3001\u30b3\u30f3\u30c6\u30f3\u30c4\u30de\u30cd\u30b8\u30e1\u30f3\u30c8\u30b7\u30b9\u30c6\u30e0\u306e\u300cJoomla\u300d\u5411\u3051\u306b\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u7de8\u96c6\u652f\u63f4\u30c4\u30fc\u30eb\u300cJoomla Content Editor\uff08JCE\uff09\u300d\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670816\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u300cCVE-2026-48907\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3082\u306e\u3002\n\n\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3067\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30a8\u30c7\u30a3\u30bf\u306e\u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u3092\u3042\u3089\u305f\u306b\u4f5c\u6210\u3057\u3066PHP\u30b3\u30fc\u30c9\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3057\u3001\u5b9f...", "creation_timestamp": "2026-07-13T12:28:26.196868Z"}, {"uuid": "6744f35b-9a72-4875-81ec-de9d2277a0a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjpxvquwc2o", "content": "\u300cJoomla\u300d\u5411\u3051\u7de8\u96c6\u30c4\u30fc\u30eb\u300cJCE\u300d\u3001\u8106\u5f31\u6027\u60aa\u7528\u306b\u6ce8\u610f\n\n\u7c73\u5f53\u5c40\u306f\u3001\u30b3\u30f3\u30c6\u30f3\u30c4\u30de\u30cd\u30b8\u30e1\u30f3\u30c8\u30b7\u30b9\u30c6\u30e0\u306e\u300cJoomla\u300d\u5411\u3051\u306b\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u7de8\u96c6\u652f\u63f4\u30c4\u30fc\u30eb\u300cJoomla Content Editor\uff08JCE\uff09\u300d\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670816\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u300cCVE-2026-48907\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3082\u306e\u3002\n\n\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3067\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30a8\u30c7\u30a3\u30bf\u306e\u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u3092\u3042\u3089\u305f\u306b\u4f5c\u6210\u3057\u3066PHP\u30b3\u30fc\u30c9\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3057\u3001\u5b9f...", "creation_timestamp": "2026-07-13T12:46:49.451634Z"}, {"uuid": "c3c4d15b-562d-429b-95d0-c7f4c38e62a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjq3rezm22o", "content": "Joomla\u3001LiteSpeed\u306e\u8106\u5f31\u6027\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u308b\n\nJoomla \u306e Joomla \u30b3\u30f3\u30c6\u30f3\u30c4 \u30a8\u30c7\u30a3\u30bf\u30fc (JCE) \u306b\u5f71\u97ff\u3092\u4e0e\u3048\u3001CVE-2026-48907 \u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u6700\u521d\u306e\u30d0\u30b0\u306f\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u30a8\u30c7\u30a3\u30bf\u30fc \u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3067\u304d\u308b\u4e0d\u9069\u5207\u306a\u30a2\u30af\u30bb\u30b9\u306e\u554f\u984c\u3068\u3057\u3066\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\n\u653b\u6483\u8005\u306f\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3066\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u30b5\u30fc\u30d0\u30fc\u306b\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3057\u3001\u4efb\u610f\u306ePHP\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u305b\u3066\u3044\u308b\u3002\n\nJCE Pro\u306e\u30d0\u30fc\u30b8\u30e7\u30f32.9.99.5\u3088\u308a\u524d\u306e\u3059\u3079\u3066\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u5f71\u97ff\u3092\u53d7\u3051\u307e\u3059\u3002\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f6\u67083\u65e5\u306b\u4fee\u6b63\u3055\u308c\u30016\u67086\u65e5\u306b\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u305f\u30d0...", "creation_timestamp": "2026-07-13T12:48:59.795853Z"}, {"uuid": "647af392-b640-4afd-8b35-c8a8c95785c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqkiacm7rs2u", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Widget Factory Joomla\u30b3\u30f3\u30c6\u30f3\u30c4\u30a8\u30c7\u30a3\u30bf\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09 \u306f\u3001Widget Factory Joomla Content Editor\uff08JCE\uff09\u306e\u8106\u5f31\u6027\uff08CVE-2026-48907\u3001CVSS\u30b9\u30b3\u30a210.0\uff09\u3092\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\n\u300cJoomla\u306eJCE\u30a8\u30c7\u30a3\u30bf\u62e1\u5f35\u6a5f\u80fd\u306b\u5b58\u5728\u3059\u308b\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30e6\u30fc\u30b6\u30fc\u5411\u3051\u306b\u65b0\u3057\u3044\u30a8\u30c7\u30a3\u30bf\u30d7\u30ed\u30d5...", "creation_timestamp": "2026-07-13T20:01:01.472978Z"}, {"uuid": "058d4885-8f90-450c-8a80-dbfe890f4151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/91453", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NoXiVaR\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-01 14:22:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:15.954048Z"}, {"uuid": "e73fbf75-46d8-42a8-91d6-69748051266e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/91202", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 21:36:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 \u2013 Joomla JCE Unauthenticated Remote Code Execution (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:17.008086Z"}, {"uuid": "57526056-fc2a-4a3e-848f-96ffa4504ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/91821", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a bayu06802\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 02:44:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython & template nuclei\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:13.148466Z"}, {"uuid": "c9dc3ca8-ec93-41be-aa09-968e30880b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/90152", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xgh057r3c0n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-22 18:42:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-48907 - Unauthenticated RCE exploit for Joomla JCE < 2.9.99.5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:21.272769Z"}, {"uuid": "b6c87fab-e3f8-47bd-b2d3-d0609d82f5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/91311", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pssec-io\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 15:50:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC for CVE-2026-48907\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:16.475916Z"}, {"uuid": "45c61cff-e780-4e3d-9492-751a2a982334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/90816", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a grayxploit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-27 09:56:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 is a CVSS 10.0 pre-auth RCE in Joomla Content Editor affecting all versions \u2264 2.9.99.4. The Grayxploit team breaks down the 3-weakness chain \u2014 missing auth, no extension validation, and an unsafe upload flag \u2014 that lets attackers pop a shell in 3 HTTP requests.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:18.101413Z"}, {"uuid": "39d44d69-890f-47b1-89d4-653a2939d29a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/91311", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pssec-io\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 15:50:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC for CVE-2026-48907\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:33.049059Z"}, {"uuid": "83b2cf58-aee8-4de1-a1f2-2debd63fce5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/91821", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a bayu06802\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 02:44:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython & template nuclei\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:21.122004Z"}, {"uuid": "67216517-1ef5-4eb5-8c70-2f8536cbb4f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/91453", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NoXiVaR\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-01 14:22:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:32.579586Z"}, {"uuid": "5ab9cc15-6919-4caa-95bd-c3fc4fb06aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/91202", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 21:36:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 \u2013 Joomla JCE Unauthenticated Remote Code Execution (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:33.529277Z"}, {"uuid": "d17773b3-e8e7-4c81-8054-45c9c83a744c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/90816", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a grayxploit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-27 09:56:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 is a CVSS 10.0 pre-auth RCE in Joomla Content Editor affecting all versions \u2264 2.9.99.4. The Grayxploit team breaks down the 3-weakness chain \u2014 missing auth, no extension validation, and an unsafe upload flag \u2014 that lets attackers pop a shell in 3 HTTP requests.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:34.440127Z"}, {"uuid": "4940fb0b-a217-451f-9ae2-30a7f3109853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/90152", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xgh057r3c0n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-22 18:42:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-48907 - Unauthenticated RCE exploit for Joomla JCE < 2.9.99.5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:37.217894Z"}, {"uuid": "1b9b7ae5-6d01-4a0f-81ff-8f53e611d42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/bdufstecru/3251", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f Joomla Content Editor (JCE) \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Joomla \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-08425\nCVE-2026-48907\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://www.joomlacontenteditor.net/support/changelog/editor", "creation_timestamp": "2026-07-14T01:00:06.113439Z"}, {"uuid": "9c8ee9a5-daae-4427-a7f2-25e084d0060d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqlornb55u24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-53359: 26 interactions\nCVE-2026-43499: 25 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-56291: 6 interactions\nCVE-2026-48907: 5 interactions\nCVE-2026-57830: 3 interactions\n", "creation_timestamp": "2026-07-14T07:30:43.424765Z"}, {"uuid": "d12e747b-a55f-4472-90e5-a56f9afee620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/WcrzV29axaMqvAyqM500IhexAvA_wc8Hn5on5ZVuAzJtS8U", "content": "", "creation_timestamp": "2026-08-07T14:00:03.843659Z"}, {"uuid": "9290374d-8cb6-4ac0-9ec3-40f8dbc7dba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/Q9l_khQPCrK3-pFmIQSwPbzLcXParwYcI8FNGTh0OV54rzY", "content": "", "creation_timestamp": "2026-08-07T14:00:03.989015Z"}, {"uuid": "461e0a1b-9c61-464f-955c-4c9c707abfd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90152", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xgh057r3c0n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-22 18:42:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-48907 - Unauthenticated RCE exploit for Joomla JCE < 2.9.99.5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:19.317217Z"}, {"uuid": "f50eceb1-ea6f-4c41-baa9-059407639e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90816", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a grayxploit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-27 09:56:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 is a CVSS 10.0 pre-auth RCE in Joomla Content Editor affecting all versions \u2264 2.9.99.4. The Grayxploit team breaks down the 3-weakness chain \u2014 missing auth, no extension validation, and an unsafe upload flag \u2014 that lets attackers pop a shell in 3 HTTP requests.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:22.446283Z"}, {"uuid": "e41543e3-93b5-44f4-ba90-6173368205fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91202", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 21:36:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 \u2013 Joomla JCE Unauthenticated Remote Code Execution (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:24.281347Z"}, {"uuid": "606e0fbb-af43-43a6-9941-8c814d66bef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91453", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NoXiVaR\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-01 14:22:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:25.828195Z"}, {"uuid": "7661b18e-e171-4af1-b2db-2e92970ed6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91311", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pssec-io\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 15:50:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC for CVE-2026-48907\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:25.327070Z"}, {"uuid": "a71624d5-292e-4e48-ac8c-bab80b10c784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91821", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a bayu06802\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 02:44:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython & template nuclei\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.057676Z"}, {"uuid": "83bef368-0152-4a71-a3db-078e6b5b00e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/bdufstecru/3251", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f Joomla Content Editor (JCE) \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Joomla \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-08425\nCVE-2026-48907\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://www.joomlacontenteditor.net/support/changelog/editor", "creation_timestamp": "2026-07-15T00:00:34.273310Z"}, {"uuid": "dc0c19db-459b-4fca-aa67-398d6b960d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/thehackernews/9260", "content": "\ud83d\udea8 A Joomla flaw is now on CISA\u2019s exploited bug list.\n\nCVE-2026-48907 has a max CVSS score of 10.0 and can let attackers upload and run PHP code through JCE editor profiles.\n\nAffected versions: 1.0.0 through 2.9.99.4\nFixed in: 2.9.99.5\n\nDetails here: https://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.html", "creation_timestamp": "2026-07-15T12:00:05.080863Z"}, {"uuid": "eb549dc2-3ab4-431d-95a6-f18ae2321e5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqphgvhrnc2o", "content": "CISA\u304c\u3001PHP\u30b3\u30fc\u30c9\u306e\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308bJoomla JCE\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u8b66\u544a\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u706b\u66dc\u65e5\u3001 Widget Factory Joomla Content Editor\uff08JCE\uff09\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u6700\u9ad8\u30ec\u30d9\u30eb\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3092\u3001\u65e2\u77e5\u306e\u60aa\u7528\u4e8b\u4f8b\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\u3053\u308c\u306f\u3001\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u8a3c\u62e0\u304c\u3042\u308b\u305f\u3081\u3060\u3002\n\nCVE-2026-48907 \uff08CVSS\u30b9\u30b3\u30a2\uff1a10.0\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u4e0d\u9069\u5207\u306a\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u304c\u539f\u56e0\u3067\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\u306a\u308b\u30b1\u30fc\u30b9\u3067\u3059\u3002", "creation_timestamp": "2026-07-15T19:30:11.023662Z"}, {"uuid": "b8f367ea-e65b-44de-aef5-7e9be7463462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "exploited", "source": "https://t.me/thehackernews/9260", "content": "\ud83d\udea8 A Joomla flaw is now on CISA\u2019s exploited bug list.\n\nCVE-2026-48907 has a max CVSS score of 10.0 and can let attackers upload and run PHP code through JCE editor profiles.\n\nAffected versions: 1.0.0 through 2.9.99.4\nFixed in: 2.9.99.5\n\nDetails here: https://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.html", "creation_timestamp": "2026-07-16T00:00:09.921038Z"}, {"uuid": "f1bacd4f-206f-490d-bbaf-791f325241da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U", "content": "", "creation_timestamp": "2026-07-16T19:00:22.719229Z"}, {"uuid": "38385e8b-a571-4f6d-ba73-6e2da8972b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/LBqrNkVY4dEwnjUy7Kq7g-cCM4l6IBHTiJls5F94h7vNHE8", "content": "", "creation_timestamp": "2026-07-16T19:00:30.246062Z"}, {"uuid": "43061a0b-c9e0-4375-81c4-0cb4e4812bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/A7idi0kvh9U61x1NsB1k_Az9Nt1DpO6JPGXo4mSDE_3-qPQ", "content": "", "creation_timestamp": "2026-07-16T19:00:25.829958Z"}, {"uuid": "d0697c3f-1b3a-43b4-a067-3f93b90b81af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/SZb_JVBvbO1kuGQqw92fKjhjyq1os5CUZfiNMsMbLPqln6k", "content": "", "creation_timestamp": "2026-07-16T19:00:25.095920Z"}, {"uuid": "b63bff18-059b-4d6b-a905-71d03d0e9e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "content": "", "creation_timestamp": "2026-07-16T19:00:27.670571Z"}, {"uuid": "9d3717dc-2db2-4f19-a810-7dff717d8e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/JkDbnMq7GUm5Q4-RPLqs1gjre-Qc5RO5_Ni4r9-mJNxKuLM", "content": "", "creation_timestamp": "2026-07-16T19:00:27.121135Z"}, {"uuid": "f42e9f2c-a22c-4c8e-9e8e-14b11d138f38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/nGUef-_pYu8KO-rMrIwqVNvY0EtG-w43zRe8aDF3SYsHftA", "content": "", "creation_timestamp": "2026-07-16T19:00:29.625753Z"}, {"uuid": "c7c5edab-19dd-4bfc-87b6-de777b744717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U", "content": "", "creation_timestamp": "2026-07-17T00:00:39.256729Z"}, {"uuid": "0f41ce6d-c93c-4ac7-8ee0-80f174036afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/SZb_JVBvbO1kuGQqw92fKjhjyq1os5CUZfiNMsMbLPqln6k", "content": "", "creation_timestamp": "2026-07-17T00:00:41.323119Z"}, {"uuid": "603d0054-4b22-485d-9a98-6551a6782cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/A7idi0kvh9U61x1NsB1k_Az9Nt1DpO6JPGXo4mSDE_3-qPQ", "content": "", "creation_timestamp": "2026-07-17T00:00:42.087819Z"}, {"uuid": "a6d9359d-89a2-4230-bb8f-7071811d47b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/nGUef-_pYu8KO-rMrIwqVNvY0EtG-w43zRe8aDF3SYsHftA", "content": "", "creation_timestamp": "2026-07-17T00:00:46.249510Z"}, {"uuid": "684b1f73-3a93-4213-a4f6-ac5f3f10b1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/JkDbnMq7GUm5Q4-RPLqs1gjre-Qc5RO5_Ni4r9-mJNxKuLM", "content": "", "creation_timestamp": "2026-07-17T00:00:43.692016Z"}, {"uuid": "5a9850bd-5601-4bda-b4a1-85489dcef49a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "content": "", "creation_timestamp": "2026-07-17T00:00:44.473073Z"}, {"uuid": "e895adf3-8683-499a-9610-d888042c9869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/LBqrNkVY4dEwnjUy7Kq7g-cCM4l6IBHTiJls5F94h7vNHE8", "content": "", "creation_timestamp": "2026-07-17T00:00:46.943578Z"}, {"uuid": "c0fa453c-4211-4c69-8923-7229af3fa06c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/JkDbnMq7GUm5Q4-RPLqs1gjre-Qc5RO5_Ni4r9-mJNxKuLM", "content": "", "creation_timestamp": "2026-07-18T00:00:07.827578Z"}, {"uuid": "fc273091-2cd9-47d8-b01f-0e55589d167e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/A7idi0kvh9U61x1NsB1k_Az9Nt1DpO6JPGXo4mSDE_3-qPQ", "content": "", "creation_timestamp": "2026-07-18T00:00:09.272870Z"}, {"uuid": "27a4af3f-2f1d-4494-97cb-5f947a2012dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U", "content": "", "creation_timestamp": "2026-07-18T00:00:11.426127Z"}, {"uuid": "97e456fb-e2c1-4319-a420-f7a0fa7a4fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/SZb_JVBvbO1kuGQqw92fKjhjyq1os5CUZfiNMsMbLPqln6k", "content": "", "creation_timestamp": "2026-07-18T00:00:10.272193Z"}, {"uuid": "7122d7b7-0040-42e8-ba5b-57bab68c4d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "content": "", "creation_timestamp": "2026-07-18T01:00:04.144019Z"}, {"uuid": "d106a600-43c1-4e50-95bf-93785bc458aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/LBqrNkVY4dEwnjUy7Kq7g-cCM4l6IBHTiJls5F94h7vNHE8", "content": "", "creation_timestamp": "2026-07-18T02:00:05.411955Z"}, {"uuid": "2f2afcff-78b0-46b9-914d-e2201aeeb759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/nGUef-_pYu8KO-rMrIwqVNvY0EtG-w43zRe8aDF3SYsHftA", "content": "", "creation_timestamp": "2026-07-18T02:00:05.781662Z"}, {"uuid": "461d98f3-b80d-414f-8a2e-f88aba10337d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/LBqrNkVY4dEwnjUy7Kq7g-cCM4l6IBHTiJls5F94h7vNHE8", "content": "", "creation_timestamp": "2026-07-19T00:00:40.268776Z"}, {"uuid": "b6064f11-97bb-47a6-8013-24e8fb4b5ea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/nGUef-_pYu8KO-rMrIwqVNvY0EtG-w43zRe8aDF3SYsHftA", "content": "", "creation_timestamp": "2026-07-19T00:00:40.568294Z"}, {"uuid": "4a7dc4de-996d-4be0-bdb9-d820cf58832b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "content": "", "creation_timestamp": "2026-07-19T00:00:41.827696Z"}, {"uuid": "4938e665-54b4-4eeb-9f08-75b015e41d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94111", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907_PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChiefYoru\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 08:21:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated Remote Code Execution (RCE) vulnerability in the JCE (Joomla Content Editor) extension for Joomla\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T10:00:03.243115Z"}, {"uuid": "986388ac-e362-444c-931d-5a3706d74659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94111", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907_PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChiefYoru\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 08:21:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated Remote Code Execution (RCE) vulnerability in the JCE (Joomla Content Editor) extension for Joomla\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T00:00:26.366490Z"}, {"uuid": "ded9595d-ad1e-47aa-8592-d6c9634320e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/FDMKvNPIu9DVJe1ShZsaOgvp3N-Hw55ecDYO_07oxLxjtOE", "content": "", "creation_timestamp": "2026-07-20T18:00:04.675847Z"}, {"uuid": "66dcfc1e-a7b3-4cec-9dc0-dd07b72dafee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/FDMKvNPIu9DVJe1ShZsaOgvp3N-Hw55ecDYO_07oxLxjtOE", "content": "", "creation_timestamp": "2026-07-21T00:00:30.105270Z"}, {"uuid": "28db8b6c-0ced-44ac-a3f9-5f24f6e402dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/pphm_HackerNews/1504", "content": "\ud83d\udd34 Joomla, LiteSpeed Vulnerabilities Exploited in Attacks\n\nThreat actors are targeting vulnerabilities in Joomla and the LiteSpeed cPanel plugin for code execution and privilege escalation.\n\nAffecting the Joomla Content Editor (JCE) for Joomla and tracked as CVE-2026-48907, the first bug is described as an improper access issue that allows unauthenticated attackers to upload editor profiles.", "creation_timestamp": "2026-07-22T05:00:04.315748Z"}, {"uuid": "3066b335-1e30-424a-a741-f1d8c7b39dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/pphm_HackerNews/1504", "content": "\ud83d\udd34 Joomla, LiteSpeed Vulnerabilities Exploited in Attacks\n\nThreat actors are targeting vulnerabilities in Joomla and the LiteSpeed cPanel plugin for code execution and privilege escalation.\n\nAffecting the Joomla Content Editor (JCE) for Joomla and tracked as CVE-2026-48907, the first bug is described as an improper access issue that allows unauthenticated attackers to upload editor profiles.", "creation_timestamp": "2026-07-23T00:00:27.254614Z"}, {"uuid": "7aacc984-d733-4df3-a3e9-9185370d5634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/horny_exploit/224", "content": "MASS Exploit Joomla [python3] \ud83e\udd8a\n\nFor:\nCVE-2026-48908 [SP Page Builder]\nCVE-2026-48907 [JCE]\n\nRun:\npython Rce-joomla.py listjoomla.txt", "creation_timestamp": "2026-07-24T03:00:03.340107Z"}, {"uuid": "9f4257cb-b596-433e-82d5-2278db33b16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/horny_exploit/227", "content": "CVE-2026-48907 \u2014 Joomla JCE Extension Unauthenticated RCE", "creation_timestamp": "2026-07-24T03:00:03.428392Z"}, {"uuid": "a78d9eec-1f32-4bc0-b47e-fb48a245faae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://www.acn.gov.it/portale/w/operational-summary-giugno-2026", "content": "", "creation_timestamp": "2026-07-24T12:45:48.588197Z"}, {"uuid": "85ca05be-030e-475d-90ec-a294bcfe9b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mrgfcgj5dg2q", "content": "A critical-severity fix just shipped for Widgetfactorylimited Jce. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-48907", "creation_timestamp": "2026-07-24T22:23:14.243234Z"}, {"uuid": "f33fa0f8-ba1f-4a10-8023-f8cb3c0cb500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/horny_exploit/227", "content": "CVE-2026-48907 \u2014 Joomla JCE Extension Unauthenticated RCE", "creation_timestamp": "2026-07-25T00:00:12.138811Z"}, {"uuid": "935f1f94-262c-4355-be8e-938630edd27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/horny_exploit/224", "content": "MASS Exploit Joomla [python3] \ud83e\udd8a\n\nFor:\nCVE-2026-48908 [SP Page Builder]\nCVE-2026-48907 [JCE]\n\nRun:\npython Rce-joomla.py listjoomla.txt", "creation_timestamp": "2026-07-25T00:00:12.257585Z"}]}