<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 23 Jul 2026 13:42:50 +0000</lastBuildDate>
    <item>
      <title>57bc73e6-e7db-4a51-98cb-12a94e72c72f</title>
      <link>https://vulnerability.circl.lu/sighting/57bc73e6-e7db-4a51-98cb-12a94e72c72f/export</link>
      <description>{"uuid": "57bc73e6-e7db-4a51-98cb-12a94e72c72f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63048", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116962809019529853", "content": "CVE-2026-63048 (CRITICAL, CVSS 9.4): joomlack.fr Page Builder CK for Joomla (v1.0.0 \u2013 3.6.2) lets authenticated users upload arbitrary files, enabling RCE. No patch \u2014 restrict usage &amp;amp; monitor for updates. https://radar.offseq.com/threat/cve-2026-63048-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-joomlackfr-page-builder-ck-3921dbf365864886 #OffSeq #Joomla #RCE #Vuln", "creation_timestamp": "2026-07-22T09:00:43.448175Z"}</description>
      <content:encoded>{"uuid": "57bc73e6-e7db-4a51-98cb-12a94e72c72f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63048", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116962809019529853", "content": "CVE-2026-63048 (CRITICAL, CVSS 9.4): joomlack.fr Page Builder CK for Joomla (v1.0.0 \u2013 3.6.2) lets authenticated users upload arbitrary files, enabling RCE. No patch \u2014 restrict usage &amp;amp; monitor for updates. https://radar.offseq.com/threat/cve-2026-63048-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-joomlackfr-page-builder-ck-3921dbf365864886 #OffSeq #Joomla #RCE #Vuln", "creation_timestamp": "2026-07-22T09:00:43.448175Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/57bc73e6-e7db-4a51-98cb-12a94e72c72f/export</guid>
      <pubDate>Wed, 22 Jul 2026 09:00:43 +0000</pubDate>
    </item>
    <item>
      <title>629796dc-c995-4511-839d-78b1c911c98e</title>
      <link>https://vulnerability.circl.lu/sighting/629796dc-c995-4511-839d-78b1c911c98e/export</link>
      <description>{"uuid": "629796dc-c995-4511-839d-78b1c911c98e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63048", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr7xjmyauh2n", "content": "Joomla Page Builder CK (v1.0.0 \u2013 3.6.2) hit by CRITICAL vuln (CVE-2026-63048): unrestricted file uploads enable RCE. No patch yet \u2014 limit access, monitor for updates. https://radar.offseq.com/threat/cve-2026-63048-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-joomlackfr-page-builder-...", "creation_timestamp": "2026-07-22T09:00:33.530377Z"}</description>
      <content:encoded>{"uuid": "629796dc-c995-4511-839d-78b1c911c98e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63048", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr7xjmyauh2n", "content": "Joomla Page Builder CK (v1.0.0 \u2013 3.6.2) hit by CRITICAL vuln (CVE-2026-63048): unrestricted file uploads enable RCE. No patch yet \u2014 limit access, monitor for updates. https://radar.offseq.com/threat/cve-2026-63048-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-joomlackfr-page-builder-...", "creation_timestamp": "2026-07-22T09:00:33.530377Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/629796dc-c995-4511-839d-78b1c911c98e/export</guid>
      <pubDate>Wed, 22 Jul 2026 09:00:33 +0000</pubDate>
    </item>
    <item>
      <title>c7727464-550a-4cf2-b2b2-5327a1e446e5</title>
      <link>https://vulnerability.circl.lu/sighting/c7727464-550a-4cf2-b2b2-5327a1e446e5/export</link>
      <description>{"uuid": "c7727464-550a-4cf2-b2b2-5327a1e446e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63048", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr7wyuajaw23", "content": "CVE-2026-63048 - Joomla Extension - joomlack.fr - Improper access control in Page Builder CK\nCVE ID : CVE-2026-63048\n \n Published : July 22, 2026, 8:16 a.m. | 19\u00a0minutes ago\n \n Description : The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file ...", "creation_timestamp": "2026-07-22T08:51:10.424339Z"}</description>
      <content:encoded>{"uuid": "c7727464-550a-4cf2-b2b2-5327a1e446e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63048", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr7wyuajaw23", "content": "CVE-2026-63048 - Joomla Extension - joomlack.fr - Improper access control in Page Builder CK\nCVE ID : CVE-2026-63048\n \n Published : July 22, 2026, 8:16 a.m. | 19\u00a0minutes ago\n \n Description : The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file ...", "creation_timestamp": "2026-07-22T08:51:10.424339Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c7727464-550a-4cf2-b2b2-5327a1e446e5/export</guid>
      <pubDate>Wed, 22 Jul 2026 08:51:10 +0000</pubDate>
    </item>
    <item>
      <title>e370d2b6-17c3-441b-92fc-7b513de11d3e</title>
      <link>https://vulnerability.circl.lu/sighting/e370d2b6-17c3-441b-92fc-7b513de11d3e/export</link>
      <description>{"uuid": "e370d2b6-17c3-441b-92fc-7b513de11d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63048", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr7wezhseo2r", "content": "CVE-2026-63048\nThe Joomla Page Builder CK extension allows authenticated users to upload arbitrary files. This means an attacker could upload malicious code, which could then be executed on the website, potentially leading to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-22T08:40:04.892498Z"}</description>
      <content:encoded>{"uuid": "e370d2b6-17c3-441b-92fc-7b513de11d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63048", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr7wezhseo2r", "content": "CVE-2026-63048\nThe Joomla Page Builder CK extension allows authenticated users to upload arbitrary files. This means an attacker could upload malicious code, which could then be executed on the website, potentially leading to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-22T08:40:04.892498Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e370d2b6-17c3-441b-92fc-7b513de11d3e/export</guid>
      <pubDate>Wed, 22 Jul 2026 08:40:04 +0000</pubDate>
    </item>
  </channel>
</rss>
