Critical Alert 2 Active Exploits Detected Today

CVE-2026-56291 — Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability →
CVE-2026-48939 — iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability →
Powered by CVE Watchtower
×
July 12, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-57828NVD

Vulnerability Summary

The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to full RCE.
Severity Level
CRITICAL(9.0)
Published Date
Jul 11, 2026
Last Modified
Jul 11, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
N/A
CVSS v4.0 Base Metrics

External References