{"uuid": "b23d336c-e6fc-4709-8661-7a363032c9f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mq7sjkxaxo2o", "content": "\ud83d\udd34 Joomla hit by two KEV flaws: CVE-2026-48908 (zero-day PHP upload + rogue Super User via com_sppagebuilder) & CVE-2026-56290 / Page Builder CK (CVSS 10.0, unauth upload \u2192 RCE). Source: The Hacker News", "creation_timestamp": "2026-07-09T14:05:50.687122Z"}