<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-23T13:42:51.627786+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/57bc73e6-e7db-4a51-98cb-12a94e72c72f/export</id>
    <title>57bc73e6-e7db-4a51-98cb-12a94e72c72f</title>
    <updated>2026-07-23T13:42:51.648105+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "57bc73e6-e7db-4a51-98cb-12a94e72c72f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63048", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116962809019529853", "content": "CVE-2026-63048 (CRITICAL, CVSS 9.4): joomlack.fr Page Builder CK for Joomla (v1.0.0 \u2013 3.6.2) lets authenticated users upload arbitrary files, enabling RCE. No patch \u2014 restrict usage &amp;amp; monitor for updates. https://radar.offseq.com/threat/cve-2026-63048-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-joomlackfr-page-builder-ck-3921dbf365864886 #OffSeq #Joomla #RCE #Vuln", "creation_timestamp": "2026-07-22T09:00:43.448175Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/57bc73e6-e7db-4a51-98cb-12a94e72c72f/export"/>
    <published>2026-07-22T09:00:43.448175+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/629796dc-c995-4511-839d-78b1c911c98e/export</id>
    <title>629796dc-c995-4511-839d-78b1c911c98e</title>
    <updated>2026-07-23T13:42:51.650128+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "629796dc-c995-4511-839d-78b1c911c98e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63048", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr7xjmyauh2n", "content": "Joomla Page Builder CK (v1.0.0 \u2013 3.6.2) hit by CRITICAL vuln (CVE-2026-63048): unrestricted file uploads enable RCE. No patch yet \u2014 limit access, monitor for updates. https://radar.offseq.com/threat/cve-2026-63048-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-joomlackfr-page-builder-...", "creation_timestamp": "2026-07-22T09:00:33.530377Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/629796dc-c995-4511-839d-78b1c911c98e/export"/>
    <published>2026-07-22T09:00:33.530377+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c7727464-550a-4cf2-b2b2-5327a1e446e5/export</id>
    <title>c7727464-550a-4cf2-b2b2-5327a1e446e5</title>
    <updated>2026-07-23T13:42:51.650282+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c7727464-550a-4cf2-b2b2-5327a1e446e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63048", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr7wyuajaw23", "content": "CVE-2026-63048 - Joomla Extension - joomlack.fr - Improper access control in Page Builder CK\nCVE ID : CVE-2026-63048\n \n Published : July 22, 2026, 8:16 a.m. | 19\u00a0minutes ago\n \n Description : The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file ...", "creation_timestamp": "2026-07-22T08:51:10.424339Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c7727464-550a-4cf2-b2b2-5327a1e446e5/export"/>
    <published>2026-07-22T08:51:10.424339+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e370d2b6-17c3-441b-92fc-7b513de11d3e/export</id>
    <title>e370d2b6-17c3-441b-92fc-7b513de11d3e</title>
    <updated>2026-07-23T13:42:51.650426+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e370d2b6-17c3-441b-92fc-7b513de11d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63048", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr7wezhseo2r", "content": "CVE-2026-63048\nThe Joomla Page Builder CK extension allows authenticated users to upload arbitrary files. This means an attacker could upload malicious code, which could then be executed on the website, potentially leading to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-22T08:40:04.892498Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e370d2b6-17c3-441b-92fc-7b513de11d3e/export"/>
    <published>2026-07-22T08:40:04.892498+00:00</published>
  </entry>
</feed>
