Back
Platform
Joomla
Related CVEs
Recent activity
Critical RCE Vulnerabilities in Joomla Extensions CVE-2026-48907 & CVE-2026-48908Two critical vulnerabilities affecting Joomla extensions have been reported: CVE-2026-48907 in the Joomla Content Editor (JCE) and CVE-2026-48908 in the SP Page Builder. Both vulne…Critical Joomla JCE Vulnerability Under Active ExploitationA critical vulnerability in the Joomla Content Editor (JCE), tracked as CVE-2026-48907, allows unauthenticated attackers to execute remote code on affected Joomla sites. This flaw …Critical PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619 DisclosedOn October 20, 2026, two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were disclosed, allowing unauthenticated remote code execution (RCE) on af…Malaysian Government Websites Targeted by Cyberattacks Exploiting Joomla VulnerabilitySeveral Malaysian government agency websites, including the Ministry of Health, were attacked by hackers identified as 'Mushr00w'. The attacks exploited a vulnerability in the Joom…Critical PHP Vulnerabilities Prompt Global Website ShutdownsTwo critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) in the PHP programming language have been disclosed, affecting versions from PHP 5.4 onward. Rated 9.2 on the CVS…PHP2Shell: Critical RCE Vulnerabilities Prompt Emergency PatchesOn October 21, 2026, the PHP security team released emergency patches for two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on…Critical RCE Vulnerabilities Disclosed in Popular WordPress PluginsMultiple critical vulnerabilities have been disclosed affecting popular WordPress plugins, including SiteSkite and LatePoint. CVE-2026-96349 and CVE-2026-92966 both allow unauthent…Knight Office Phishing Kit Targets Microsoft 365 Accounts via Session HijackingA new phishing kit named 'Knight Office' has been identified, targeting Microsoft 365 accounts by stealing active login sessions instead of passwords. Discovered by Huntress during…ESET Uncovers Long-Standing Linux/Mumblehard Malware Targeting Web ServersESET researchers have identified a sophisticated family of Linux malware named Linux/Mumblehard, which has been active for over five years. This malware primarily targets Linux and…