{"vulnerability": "cve-2026-57828", "sightings": [{"uuid": "2889dd07-012e-4796-a80a-25324f8b5ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57828", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqeh2ucr3v2b", "content": "CVE-2026-57828 - phoca.cz phoca download extension for joomla\nThe Joomla Phoca Downloads extension's RSFiles component has a security issue that allows a registered user to upload malicious files. This could allow an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phocacz #CVE #infosec", "creation_timestamp": "2026-07-11T10:24:04.705179Z"}, {"uuid": "c877f435-d06a-4dc4-aca0-2d358a6fd1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57828", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqei242wbd2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-57828 \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Phoca Downloads \u0434\u043b\u044f Joomla: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5970D364-22C6-4BF3-BC67-9263A4D83FCF", "creation_timestamp": "2026-07-11T10:41:33.137252Z"}, {"uuid": "ddf34717-62e8-4e42-92d8-84b5d8a2d583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57828", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqel6pxdtu26", "content": "CVE-2026-57828 - Joomla Extension - phoca.cz - Authenticated file upload in RSFiles component\nCVE ID : CVE-2026-57828\n \n Published : July 11, 2026, 10:16 a.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitr...", "creation_timestamp": "2026-07-11T11:37:49.249713Z"}, {"uuid": "dbd37483-ce3e-449a-9ef4-1e0f29a6c54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-57828", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116901231158679482", "content": "Phoca Download for Joomla (v1.0 \u2013 6.1.2) suffers a CRITICAL vuln (CVE-2026-57828): Authenticated users can upload/execute malicious files (RCE risk). No official patch \u2014 limit upload access & monitor for updates. https://radar.offseq.com/threat/cve-2026-57828-cwe-434-unrestricted-upload-of-file-ad4cf46e851b4cfe #OffSeq #Joomla #Infosec #CVE202657828", "creation_timestamp": "2026-07-11T12:00:28.104886Z"}, {"uuid": "06fd4477-28fc-41b4-b7d0-fbee1aa62c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-57828", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqemhb6jv52i", "content": "CRITICAL: CVE-2026-57828 in Phoca Download (Joomla) lets authenticated users upload/execute files (RCE risk). No patch yet \u2014 restrict uploads, watch for updates. https://radar.offseq.com/threat/cve-2026-57828-cwe-434-unrestricted-upload-of-file-ad4cf46e851b4cfe #OffSeq #Joomla #Vulnerability", "creation_timestamp": "2026-07-11T12:00:30.035035Z"}, {"uuid": "4977d969-c2cd-4e81-9a97-e8f079f31c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57828", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqeqzkkxv62n", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-57828](https://mysites.guru/blog/phoca-download-authenticated-file-upload-rce/)\nThe Joo...\nhttps://mysites.guru/blog/phoca-download-authenticated-file-upload-rce/ #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-07-11T13:22:18.215885Z"}]}