{"vulnerability": "CVE-2026-5629", "sightings": [{"uuid": "aa1ad210-044d-4886-a2d1-46f71567af44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5629", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116353877163234817", "content": "", "creation_timestamp": "2026-04-05T20:01:08.702141Z"}, {"uuid": "a4098db1-121f-4eca-b94f-7aac572ad2bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5629", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mismskh3g72r", "content": "", "creation_timestamp": "2026-04-06T06:22:34.234995Z"}, {"uuid": "4296f653-fea6-41fd-b63a-e92205c85a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5629", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3misomiy55x22", "content": "", "creation_timestamp": "2026-04-06T06:54:56.070503Z"}, {"uuid": "1cdf566b-3a3d-447b-a2a2-9ea72e3deec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5629", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116356587761938741", "content": "", "creation_timestamp": "2026-04-06T07:30:29.413683Z"}, {"uuid": "3128c3d1-716f-44bf-b5f6-a760fe9f2571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5629", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3misqm4t73326", "content": "", "creation_timestamp": "2026-04-06T07:30:31.770135Z"}, {"uuid": "8dcfbc11-d1c5-4a38-8fac-b4ed43d32cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5629", "type": "published-proof-of-concept", "source": "Telegram/o3_mwh5t31wFs53gbWcHxGoKFw6Bzu5qFna4ujBmbKrjBpw", "content": "", "creation_timestamp": "2026-04-06T07:15:43.000000Z"}, {"uuid": "45fb108c-6a8d-42af-b9be-de98b8387226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5629", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkr26v5s2q2q", "content": "\ud83d\udccc CVE-2026-5629 - A vulnerability was detected in Belkin F9K1015 1.00.10. The affected element is the function formSetFirewall of the file /goform/formSetFirewall. The ... https://www.cyberhub.blog/cves/CVE-2026-5629", "creation_timestamp": "2026-05-01T02:07:07.787460Z"}, {"uuid": "71a6c079-4793-48d6-ae2f-1316988d13b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56294", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moqpirzysj2w", "content": "CVE-2026-56294 - capacitor-native-biometric - Authentication Bypass via Unvalidated CryptoObject in onAuthenticationSucceeded\nCVE ID : CVE-2026-56294\n \n Published : June 20, 2026, 3:24 p.m. | 4\u00a0hours, 18\u00a0minutes ago\n \n Description : capacitor-native-biometric before 12.128.2 c...", "creation_timestamp": "2026-06-20T20:36:35.535146Z"}, {"uuid": "ba7d3fe9-5d4b-4724-9fb4-f7a98940d9b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56295", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moqqvkhrsn2g", "content": "CVE-2026-56295 - Capgo - Policy Enforcement Bypass in Webhook Management Endpoints via Non-Expiring API Keys\nCVE ID : CVE-2026-56295\n \n Published : June 20, 2026, 3:24 p.m. | 4\u00a0hours, 18\u00a0minutes ago\n \n Description : Capgo before 12.128.2 contains an authorization bypass vulner...", "creation_timestamp": "2026-06-20T21:01:37.573162Z"}, {"uuid": "7128a53a-8961-4907-9ba1-31bfb72f569e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpgsznnfyb2l", "content": "CVE-2026-56290 - Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension\nCVE ID : CVE-2026-56290\n \n Published : June 29, 2026, 2:31 p.m. | 40\u00a0minutes ago\n \n Description : The Joomla extension Page Builder CK is vulnerable to an unauthenticated...", "creation_timestamp": "2026-06-29T15:38:16.681918Z"}, {"uuid": "1057ac75-edcd-445f-8117-f907aed21f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgutq6tab22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56290 \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Page Builder CK \u0434\u043b\u044f Joomla: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/416615A9-0C78-4628-BDFE-CD02B6B241FD", "creation_timestamp": "2026-06-29T16:10:45.442224Z"}, {"uuid": "d68b2d29-4994-4907-90b9-513562447b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mppkw5emi42f", "content": "\ud83d\udccc CVE-2026-56290 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to ful... https://www.cyberhub.blog/cves/CVE-2026-56290", "creation_timestamp": "2026-07-03T03:07:06.763883Z"}, {"uuid": "9c434407-21bc-4752-b676-287f258e8857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqk27udzy2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56290 \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Page Builder CK \u0434\u043b\u044f Joomla: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5B77B9CD-B233-4DFD-A77A-65C331646D44", "creation_timestamp": "2026-07-03T12:24:09.782556Z"}, {"uuid": "d992673d-c2d1-48bf-837c-ac12577edd8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwecjenv72k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56290 \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Page Builder CK \u0434\u043b\u044f Joomla: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A9EFFA6F-335E-4A35-9729-370B65697A53", "creation_timestamp": "2026-07-05T19:57:23.840960Z"}, {"uuid": "ffd27df6-5b7b-45f5-b9e9-8af0d23ed644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/csirts.bsky.social/post/3mq34zqoytw2d", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-56290: Joomlack Page Builder Improper Access Control Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-56290", "creation_timestamp": "2026-07-07T17:30:32.363770Z"}, {"uuid": "942727e8-1bcc-4b4b-b6d0-54c084b7bec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq354jypwd2k", "content": "CVE-2026-56290 - page_builder_ck [known exploited]\nThe Joomla Page Builder CK extension is vulnerable to a serious security risk. An attacker can upload malicious files without logging in, which can lead to a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#joomlack #CVE #infosec", "creation_timestamp": "2026-07-07T17:32:05.670583Z"}, {"uuid": "32c8511b-42bf-41d5-b506-f541d713e1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116879890133195498", "content": "CISA has updated the KEV catalogue.\n-  CVE-2026-56290: Joomlack Page Builder Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-56290\n-  CVE-2026-55255: Langflow Authorization Bypass Through User-Controlled Key Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-55255\n-  CVE-2026-48908: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48908\nSeveral industrial vulnerabilities: https://www.cisa.gov/ #infosec #vulnerability #CISA", "creation_timestamp": "2026-07-07T17:33:09.803361Z"}, {"uuid": "6f483719-f557-4b71-ac41-ec29d693d195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mq36drvbnv2c", "content": "\ud83d\uded1 CVE-2026-56290\nJoomlack Page Builder\nCVSS 10.0 / EPSS 0% / KEV: No\nTL;DR: The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary f\u2026\nhttps://cvesentinel.com/report/CVE-2026-56290?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-07T17:54:07.284820Z"}, {"uuid": "1200e718-8255-48c3-ae4a-dc98d8260f68", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ee34d77-b707-46d5-baed-7361fcc5150c", "content": "", "creation_timestamp": "2026-07-07T18:00:24.416565Z"}, {"uuid": "4061bf0b-4cd0-4bc6-8f71-6b4cc04f07c1", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/506817d1-03c3-41da-b990-e33f2ad9e33d", "content": "", "creation_timestamp": "2026-07-07T18:00:31.872519Z"}, {"uuid": "65f9e803-1509-42b1-b1b2-e40ebeb39266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6935162", "content": "2026-07-07: [CVE-2026-56290] Joomlack Page Builder Improper Access Control VulnerabilityJoomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.\ncisakev", "creation_timestamp": "2026-07-07T18:26:39.409283Z"}, {"uuid": "c15cdb0e-4f16-4d20-88f8-a5d026c38b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mq3cvhv6x524", "content": "\ud83d\uded1 CVE-2026-56290\nJoomlack Page Builder\nCVSS 10.0 / EPSS 0% / KEV \u2705\nTL;DR: The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary fil\u2026\nhttps://cvesentinel.com/report/CVE-2026-56290?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-07T19:15:31.497856Z"}, {"uuid": "3a833dba-4290-4021-8989-4f634cf54a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mq4cpumcxcfn", "content": "CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability\nCVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability  \nCVE-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability", "creation_timestamp": "2026-07-08T04:45:04.221867Z"}, {"uuid": "18bec4bf-c2e8-4098-b18d-c60986542ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116884244173717703", "content": "CRITICAL vulnerabilities in Adobe ColdFusion (CVE-2026-48282), Langflow (CVE-2026-55255), Joomla SP Page Builder (CVE-2026-48908), & Page Builder CK (CVE-2026-56290) are being actively exploited for remote code execution & backdoors. Patch ASAP! https://radar.offseq.com/threat/cisa-urges-immediate-patching-of-exploited-coldfus-c7b23bd787139571 #OffSeq #CyberSec #CVE", "creation_timestamp": "2026-07-08T12:00:27.550117Z"}, {"uuid": "aac45e9e-4fe7-4d34-bf82-ac2340afcefd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56297", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5iieesd42z", "content": "CVE-2026-56297 - FreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback\nCVE ID : CVE-2026-56297\n \n Published : July 8, 2026, 2:17 p.m. | 42\u00a0minutes ago\n \n Description : FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and d...", "creation_timestamp": "2026-07-08T16:00:53.278760Z"}, {"uuid": "07772314-5d27-4c0a-b6da-ca5e85ece0ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56298", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5kj564gz27", "content": "CVE-2026-56298 - Capgo - EXIF Metadata Exposure in App Information Image Upload\nCVE ID : CVE-2026-56298\n \n Published : July 8, 2026, 2:17 p.m. | 42\u00a0minutes ago\n \n Description : Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app information endp...", "creation_timestamp": "2026-07-08T16:37:06.634863Z"}, {"uuid": "97f961ca-8449-4e8a-b840-03e61b27a54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116889906648087046", "content": "CVE-2026-56291 | CRITICAL: Balbooa Forms for Joomla (v1.0 \u2013 2.4.0) allows unauthenticated RCE via arbitrary file upload (CWE-434). No patch yet. Disable or restrict access until fixed. https://radar.offseq.com/threat/cve-2026-56291-cwe-434-unrestricted-upload-of-file-aa89baa3213ad239 #OffSeq #Joomla #RCE #Vuln", "creation_timestamp": "2026-07-09T12:00:30.367028Z"}, {"uuid": "596be121-8685-40e9-802b-8ecb5f64837f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mq7ljhukn42i", "content": "CRITICAL: Balbooa Forms for Joomla (1.0 \u2013 2.4.0) lets unauthenticated attackers upload and run files, enabling full RCE. No patch out. Restrict or disable use now. https://radar.offseq.com/threat/cve-2026-56291-cwe-434-unrestricted-upload-of-file-aa89baa3213ad239 #OffSeq #Joomla #Security", "creation_timestamp": "2026-07-09T12:00:31.415727Z"}, {"uuid": "3ce5e181-ab04-4604-94f8-bfa1df6b5e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq7lnwtosi2x", "content": "CVE-2026-56291 - Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension\nCVE ID : CVE-2026-56291\n \n Published : July 9, 2026, 11:16 a.m. | 32\u00a0minutes ago\n \n Description : The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arb...", "creation_timestamp": "2026-07-09T12:03:01.091980Z"}, {"uuid": "2b09f458-90df-4ec9-916d-d25890857cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mq7sjkxaxo2o", "content": "\ud83d\udd34 Joomla hit by two KEV flaws: CVE-2026-48908 (zero-day PHP upload + rogue Super User via com_sppagebuilder) & CVE-2026-56290 / Page Builder CK (CVSS 10.0, unauth upload \u2192 RCE). Source: The Hacker News", "creation_timestamp": "2026-07-09T14:05:50.742832Z"}, {"uuid": "ac3b0e51-8152-4608-b133-f9407bb6ff1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56292", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq7ucjr7o52t", "content": "CVE-2026-56292 - Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension\nCVE ID : CVE-2026-56292\n \n Published : July 9, 2026, 1:49 p.m. | 42\u00a0minutes ago\n \n Description : A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered. Expl...", "creation_timestamp": "2026-07-09T14:37:41.843571Z"}, {"uuid": "804f73aa-c39e-4c56-b3e4-945a26613f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56292", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqa65xtg2r2z", "content": "CVE-2026-56292\nAcyMailing component in Joomla versions lower than 10.11.1 has a security issue that could allow hackers to access and steal sensitive data. This is a serious concern for websites using AcyMailing, as it could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-09T17:34:06.572694Z"}, {"uuid": "30e35126-0445-4044-8cb5-6ec133931c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://gist.github.com/zycoder0day/84b690503eda36cf270f468c98d519d6", "content": "", "creation_timestamp": "2026-07-10T10:13:00.144958Z"}, {"uuid": "9167a1bf-d8b4-4a2c-952f-2b6d32cccb3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://gist.github.com/zycoder0day/e0748291ba9f7e63533b60e8bd9eefbd", "content": "", "creation_timestamp": "2026-07-10T10:13:41.478263Z"}, {"uuid": "006e5266-04a2-4f05-8d60-22113691a7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116896829543133479", "content": "CISA has added two vulnerabilities to the KEV catalogue.\n-  CVE-2026-48939: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48939\n-  CVE-2026-56291: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-56291 #CISA #infosec #vulnerability", "creation_timestamp": "2026-07-10T17:21:04.803099Z"}, {"uuid": "a53a5f65-ff79-40fc-befd-e109305fe701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mqcofmrma52k", "content": "Critical alert for Adobe ColdFusion users: CVE-2026-56290 allows for potential RCE. Our latest forensic deep-dive breaks down the technical impact and provides the hardening steps you need to secure your production environment. Don't wait for the breach\u2014patch\u2026", "creation_timestamp": "2026-07-10T17:30:02.909694Z"}, {"uuid": "92e2ef8f-d2e2-4918-bf2c-700fc0fc3b85", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2441e572-031d-4f21-a37b-f97ea742bf70", "content": "", "creation_timestamp": "2026-07-10T18:00:02.597504Z"}, {"uuid": "432d1805-bc35-4faa-90ea-ad5d011cfcd9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7f8175a4-d002-4926-ad93-9c4b5f79efc9", "content": "", "creation_timestamp": "2026-07-10T18:00:24.652822Z"}, {"uuid": "e9093ec0-6b07-499f-8210-ea42aaa0e23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mqcr4thq7p2j", "content": "\ud83d\uded1 CVE-2026-56291\nBalbooa Forms\nCVSS 10.0 / EPSS 0% / KEV \u2705\nTL;DR: The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload t\u2026\nhttps://cvesentinel.com/report/CVE-2026-56291?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-10T18:18:48.716003Z"}, {"uuid": "6dddaca5-dafc-4a19-94e5-b44d8b35e0f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56297", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcudgdoch2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56297 \u0432 FreeRDP: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8CC8764F-FB54-4D81-87FA-0DF15416970E", "creation_timestamp": "2026-07-10T19:16:10.986580Z"}, {"uuid": "7ba53e00-f375-4d83-979a-2a152e4a3b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mqcypaimml2a", "content": "Critical Alert: Joomlack Page Builder CVE-2026-56290 allows for unauthorized access control bypasses. Secure your perimeter now with our latest forensic deep-dive, featuring detection queries and hardening protocols. Don\u2019t wait for the breach\u2014patch today\n\nhttps://thecybermind.co/w06o", "creation_timestamp": "2026-07-10T20:34:26.930670Z"}, {"uuid": "d8a4ab19-c0a6-4b4c-94a8-0bff151baf53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6961010", "content": "2026-07-10: [CVE-2026-56291] Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityBalbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which could allow uploading of executable files leading to full RCE.\ncisakev", "creation_timestamp": "2026-07-10T21:00:34.038500Z"}, {"uuid": "79017480-3fda-42e1-9ed6-48d6d54a490a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqdlc7ntu62d", "content": "\ud83d\udccc CVE-2026-56291 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full ... https://www.cyberhub.blog/cves/CVE-2026-56291", "creation_timestamp": "2026-07-11T02:07:06.837562Z"}, {"uuid": "05c37243-75db-4d6d-a6d6-ade99b6d264f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56292", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqdonj7tkc2g", "content": "\ud83d\udccc CVE-2026-56292 - A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered. Exploiting this flaw can lead to unauthorized database access and da... https://www.cyberhub.blog/cves/CVE-2026-56292", "creation_timestamp": "2026-07-11T03:07:06.846522Z"}, {"uuid": "c5e2e593-7508-4973-bffa-30b0a4562194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqebrjho4z2k", "content": "A perfect 10. That's the CVSS score for this one.\n\nCVE-2026-56291.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-56291-balbooa-forms-unauthenticated-rce-exploited/\n\n#CyberSecurity #PatchNow", "creation_timestamp": "2026-07-11T08:49:23.026355Z"}, {"uuid": "202b15a0-b533-427f-b015-43786a66446c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mqenbqtw5w2y", "content": "Critical Alert: Joomlack Page Builder CVE-2026-56290 allows unauthenticated attackers to upload PHP web shells and achieve full RCE. Protect your Joomla site now with our forensic deep-dive, detection queries, and hardening protocols. Don\u2019t wait\u2014patch today.\u2026", "creation_timestamp": "2026-07-11T12:15:18.977775Z"}, {"uuid": "3f4d3a9f-fb0f-41b7-ac92-784964a098c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56296", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqevevaz5z2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56296 \u0432 Cap-go: \u0443\u0433\u0440\u043e\u0437\u0430 \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/10123929-9243-4221-8C13-569EFAAE05A7", "creation_timestamp": "2026-07-11T14:40:13.498956Z"}, {"uuid": "919aef44-924e-4f76-a0ae-0e6b49992a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56296", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqeyjfs3bh2x", "content": "CVE-2026-56296 - Cap-go - App Existence Oracle via Unauthenticated transfer_app RPC\nCVE ID : CVE-2026-56296\n \n Published : July 11, 2026, 2:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : Cap-go before 12.128.2 contains an information disclosure vulnerability in the public.tr...", "creation_timestamp": "2026-07-11T15:36:26.263446Z"}, {"uuid": "35b06be8-e127-4ed8-825d-8b96051085b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mqfjy535kc2p", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-56291: The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading exec\u2026\nCVSS 9.8 \u00b7 EPSS 0.8% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-56291\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-11T20:48:54.092666Z"}, {"uuid": "5cf009e2-084b-424b-929b-9d0a7484e8db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqgt2iclle2z", "content": "\u26a0\ufe0f A perfect 10.0 CVSS score. That's not a typo.\n\nCVE-2026-56291.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-56291-balbooa-forms-unauthenticated-rce-exploited/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-07-12T09:03:56.463983Z"}, {"uuid": "0794fe45-caa6-415a-b5e8-09d6c7f0ffa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116907369274600216", "content": "\ud83d\udcf0 CISA Adds Two Actively Exploited Joomla Plugin Flaws to KEV Catalog\n\ud83d\udce2 CISA KEV UPDATE: Two Joomla plugin vulnerabilities are now listed as actively exploited. CVE-2026-48939 (iCagenda) & CVE-2026-56291 (Balbooa Forms) allow file uploads and server takeover. Patch immediately! #CISA #KEV #Joomla #Vulnerability\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-joomla-icagenda-balbooa-flaws-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-07-12T14:01:28.665080Z"}, {"uuid": "a14a455c-2bb7-4a3c-b8fd-4e7115d97493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mqhdpsawu725", "content": "\ud83d\udce2 CISA KEV UPDATE: Two Joomla plugin vulnerabilities are now listed as actively exploited. CVE-2026-48939 (iCagenda) & CVE-2026-56291 (Balbooa Forms) allow file uploads and server takeover. Patch immediately! #CISA #KEV #Joomla #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-12T14:02:12.095025Z"}, {"uuid": "42c02467-9f05-489e-a079-d47cce188268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfhzysx72c", "content": "CVE-2026-56291: Joomla Extensions Expose Organizations to Critical Risk #CVE202656291 #Joomla #CyberSecurity", "creation_timestamp": "2026-07-13T09:38:58.248040Z"}, {"uuid": "c38cfd8d-b545-415e-abec-b6a7e7cff668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mqir6myhs62o", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-56291) Balbooa Forms Remote Code Execution via Unauthenticated File Upload\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-07-13T03:35:47.664162Z"}, {"uuid": "454ed6ed-c205-4ff6-9fba-194a6c809847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mqj5wg6v462s", "content": "\ud83e\udd16 CVE-2026-48939 & CVE-2026-56291 (CVSS 10.0): Two Joomla extensions exploited as zero-days in the wild. Unauthenticated RCE via file upload. CISA KEV added.\nhttps://thehackernews.com/2026/07/icagenda-and-balbooa-forms-joomla-flaws.html", "creation_timestamp": "2026-07-13T07:23:50.791754Z"}, {"uuid": "e76cacb3-e0b6-4ec9-9a4d-e982a5d34083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfhuju4x2f", "content": "CVE-2026-56291: Exploitation of Joomla Extensions is an Immediate Risk #CVE2026 #JoomlaSecurity #CyberSecurity", "creation_timestamp": "2026-07-13T09:38:52.557665Z"}, {"uuid": "6caa5a22-fcb4-4b05-b316-d7edd33ccf45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfhw4p3627", "content": "CVE-2026-56291 and CVE-2026-48939: Joomla Extensions Expose Unpatched Risk #Joomla #Cybersecurity #Vulnerability", "creation_timestamp": "2026-07-13T09:38:54.144523Z"}, {"uuid": "b5ed8d75-a146-4782-95a0-96491d246d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfhxw7if2k", "content": "CVE-2026-56291 and CVE-2026-48939: Joomla Extensions Expose Untracked Risks #CyberSecurity #Vulnerabilities #Joomla", "creation_timestamp": "2026-07-13T09:38:56.454019Z"}, {"uuid": "ef73c266-e367-4cdb-aa46-ab92b208fa44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfi57zv32j", "content": "CVE-2026-56291: Joomla Extensions Vulnerabilities Don't Justify Alarmist Hype #CyberSecurity #Joomla #Vulnerabilities", "creation_timestamp": "2026-07-13T09:39:01.867290Z"}, {"uuid": "d7402c10-1fc9-4e3a-a416-8d35667f7021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfm3n2vp2f", "content": "CVE-2026-56291 and CVE-2026-48939: Urgency or Overreaction in Joomla's Security Response? #Joomla #CyberSecurity #VulnerabilityManagement", "creation_timestamp": "2026-07-13T09:41:14.678841Z"}, {"uuid": "4bb161de-6a20-457f-bc44-7c4cee034f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mqkmnbpmtc2n", "content": "Monday\u2019s fuck up - this Time - Joomla - \u200aCISA Warns of Actively Exploited Joomla Zero-Day Vulnerabilities. CVE-2026-48939 in iCagenda and CVE-2026-56291 in Balbooa Actively Exploited!\nthecyberexpress.com/cisa-cve-202... #joomla #exploit #0day #CISA #cve-2026-48939 #cve-2026-56291 #iCagenda #Balbooa", "creation_timestamp": "2026-07-13T11:20:07.814963Z"}, {"uuid": "02fb9d69-1617-4fb6-bc61-a7feb75129cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://dnsc.ro/citeste/alerta-vulnerabilitati-exploatate-activ-in-joomla", "content": "", "creation_timestamp": "2026-07-13T12:15:13.403685Z"}, {"uuid": "4884fb6c-eac2-425b-8dc3-cba9fb9b7c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mqjplozg4p2v", "content": "U.S. CISA has added two vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-48939 (iCagenda) and CVE-2026-56291 (Balbooa Forms). CVE-2026-48939, with a CVSS score of 10.0, allows arbitrary file uploads leading to PHP code execution.", "creation_timestamp": "2026-07-13T12:39:58.007689Z"}, {"uuid": "b738bc9c-07f1-4653-90fe-b6b4d706bf15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjzbegj7q27", "content": "CVE-2026-48939 and CVE-2026-56291: Joomla Extensions Are Under Siege #Joomla #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-13T15:33:09.628461Z"}, {"uuid": "5ec233c5-7fda-45da-8f70-dbfddfee2e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjzbgc4ui2h", "content": "CVE-2026-48939 and CVE-2026-56291 Expose Joomla Sites to RCE \u2014 Immediate Action Required #Joomla #CyberSecurity #RCE", "creation_timestamp": "2026-07-13T15:33:11.195698Z"}, {"uuid": "948bd189-ec45-468c-a435-35b27c9f9145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/threatclaw.bsky.social/post/3mqk2l6vfv42i", "content": "New ThreatClaw Detections: Exploited CMS Flaws & Firmware Risks\n\nThis week, ThreatClaw expands coverage for actively exploited CMS vulnerabilities (CVE-2026-48908, CVE-2026-56290) and suspicious\u2026\n\nhttps://threatclaw.io/en/blog/detection-update-2026-07-10\n\n#infosec #ThreatDetection #DFIR #CVE", "creation_timestamp": "2026-07-13T15:56:32.481880Z"}, {"uuid": "1e914f60-e901-46d8-be56-9a049ed32d1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mqkdz6s6c22d", "content": "CISA flags active RCE exploitation in Joomla extensions iCagenda and Balbooa Forms. Arbitrary file upload flaws in CVE-2026-48939 and CVE-2026-56291 can lead to full site compromise. #Joomla #iCagenda #BalbooaForms", "creation_timestamp": "2026-07-13T18:45:25.954014Z"}, {"uuid": "43229547-37fc-4054-bd9c-dd96d2bfb5eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116914226485690947", "content": "\ud83d\udcf0 CISA Adds Two Actively Exploited Joomla Plugin Flaws to KEV Catalog\n\ud83d\udce2 CISA KEV UPDATE: Two Joomla plugin vulnerabilities are now listed as actively exploited. CVE-2026-48939 (iCagenda) & CVE-2026-56291 (Balbooa Forms) allow file uploads and server takeover. Patch immediately! #CISA #KEV #Joomla #Vulnerability\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-joomla-icagenda-balbooa-flaws-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-07-13T19:05:21.682789Z"}, {"uuid": "7bfc25ab-a380-4714-ad92-b3fa2853306e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mqkf637sbx2u", "content": "\ud83d\udce2 CISA KEV UPDATE: Two Joomla plugin vulnerabilities are now listed as actively exploited. CVE-2026-48939 (iCagenda) & CVE-2026-56291 (Balbooa Forms) allow file uploads and server takeover. Patch immediately! #CISA #KEV #Joomla #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-13T19:06:04.025687Z"}, {"uuid": "b7a39a5e-5496-42b8-8759-2ec9eb2cb06f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://t.me/GithubRedTeam/92958", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 10:57:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nBalbooa Forms (com_baforms) < 2.4.1 \u2014 Unauthenticated File Upload to RCE via form.uploadAttachmentFile | CVSS 9.8 | CISA KEV\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:04.754907Z"}, {"uuid": "981839eb-fced-4c97-b85d-7a00924b385d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://t.me/GithubRedTeam/92450", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56290\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Jenderal92\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 04:34:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-56290 - Mass Exploit for Joomla Com_pagebuilderck component (Unrestricted File Upload \u2192 RCE). Multi-threaded, automatic CSRF bypass, PHP shell uploader.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:07.785869Z"}, {"uuid": "50824ab8-e91e-4396-83ca-7d1f02a2a27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://t.me/GithubRedTeam/91809", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a pbck-exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 00:01:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\udce4 Mass exploitation framework for CVE-2026-56290 \u2014 Page Builder CK Joomla unauthenticated file upload to RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:13.657144Z"}, {"uuid": "990dd522-0074-4776-b080-27d45c77ef2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://t.me/GithubRedTeam/91877", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a PageBuilderCK-CVE-2026-56290-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sagsooz\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 10:21:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPage Builder CK for Joomla - Unauthenticated SSRF / Remote File Write leading to PHP execution Exploiter\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:13.339459Z"}, {"uuid": "3ddbd633-53a6-453f-8e25-6215b0463ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92958", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 10:57:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nBalbooa Forms (com_baforms) < 2.4.1 \u2014 Unauthenticated File Upload to RCE via form.uploadAttachmentFile | CVSS 9.8 | CISA KEV\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:08.137821Z"}, {"uuid": "4c87ea81-f182-4687-bb3c-0b0d13e6a50a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://t.me/GithubRedTeam/92450", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56290\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Jenderal92\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 04:34:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-56290 - Mass Exploit for Joomla Com_pagebuilderck component (Unrestricted File Upload \u2192 RCE). Multi-threaded, automatic CSRF bypass, PHP shell uploader.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.088698Z"}, {"uuid": "f2c96803-26e2-4349-a97d-d084dc81b0e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://t.me/GithubRedTeam/91809", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a pbck-exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 00:01:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\udce4 Mass exploitation framework for CVE-2026-56290 \u2014 Page Builder CK Joomla unauthenticated file upload to RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:21.574727Z"}, {"uuid": "e4480feb-933d-44b8-bfad-8f567c93201e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://t.me/GithubRedTeam/91877", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a PageBuilderCK-CVE-2026-56290-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sagsooz\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 10:21:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPage Builder CK for Joomla - Unauthenticated SSRF / Remote File Write leading to PHP execution Exploiter\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:21.287581Z"}, {"uuid": "8c95ca35-2167-49a5-8043-8268867e9a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://t.me/bdufstecru/3301", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 browse.ajaxAddPicture \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f PageBuilder CK \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u044b\u043c Joomla \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0442\u0438\u043f\u0430 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09466\nCVE-2026-56290\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.6.0 \u0438 \u0432\u044b\u0448\u0435:\nhttps://www.joomlack.fr/en/joomla-extensions/page-builder-ck", "creation_timestamp": "2026-07-14T01:00:04.286122Z"}, {"uuid": "f48e2ad7-85c8-4b88-af62-fd973f3147c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mqli7q37zh2a", "content": "CISA warns of actively exploited RCE flaws in Joomla extensions (CVE-2026-48939 and CVE-2026-56291) #patchmanagement", "creation_timestamp": "2026-07-14T05:33:20.037435Z"}, {"uuid": "669a852b-167e-4889-8c0d-3d7fbe529a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mqloi5uyei22", "content": "\ud83d\udcf0 CISA Peringatkan Celah Kritis pada Ekstensi Joomla yang Sedang Dieksploitasi untuk Serangan RCE\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/14/cisa-peringatkan-kerentanan-joomla-rce/\n\n#balbooaForms #cisa #cve-2026-48939 #cve-2026-56291 #cyberSecurity #icagenda #joomla #rce", "creation_timestamp": "2026-07-14T07:25:25.469304Z"}, {"uuid": "e2f08700-29d8-45c2-951f-445aa4a2f779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqlornb55u24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-53359: 26 interactions\nCVE-2026-43499: 25 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-56291: 6 interactions\nCVE-2026-48907: 5 interactions\nCVE-2026-57830: 3 interactions\n", "creation_timestamp": "2026-07-14T07:30:43.379566Z"}, {"uuid": "87f31ad6-8241-46ba-b062-9759da42fb62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqlu464yny26", "content": "A CVSS 10.0 vulnerability has a perfect track record of being ignored until it's too late.\n\nCVE-2026-56291.\n\nhttps://www.yazoul.net/malware/mirai-2026-07/reports/2026-07-12/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-14T09:06:05.467716Z"}, {"uuid": "d5f690e8-b531-44bd-be40-ff274d96e2fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqm3x766yk2r", "content": "Two Joomla extensions hit maximum severity. CISA confirms they're being exploited as zero-days.\n\nCVE-2026-48939.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-56291-balbooa-forms-unauthenticated-rce-exploited/\n\n#InfoSec #ThreatIntel", "creation_timestamp": "2026-07-14T11:26:28.602590Z"}, {"uuid": "c67ed81e-6fc0-4576-a921-754cd83c9354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6i637wp2p", "content": "CVE-2026-48939 and CVE-2026-56291: Joomla\u2019s Exploitation Exposes Security Gaps Amid Inaction #Joomla #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-14T12:11:45.779574Z"}, {"uuid": "b9714276-49a4-43c5-8f06-381ef3375caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6iced2d26", "content": "CVE-2026-48939 and CVE-2026-56291: Joomla Extensions Fail to Protect Users #CVE2026 #Joomla #CyberSecurity", "creation_timestamp": "2026-07-14T12:11:50.552323Z"}, {"uuid": "3a654e1d-1ac5-4690-8f6f-0d9b5086dbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6ijcdoa2o", "content": "CVE-2026-48939 and CVE-2026-56291: Are Joomla Patches Enough? #Joomla #Cybersecurity #Vulnerabilities", "creation_timestamp": "2026-07-14T12:11:57.577319Z"}, {"uuid": "33771439-9072-48e5-878a-75fbd6d9bbea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91809", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a pbck-exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 00:01:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\udce4 Mass exploitation framework for CVE-2026-56290 \u2014 Page Builder CK Joomla unauthenticated file upload to RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:28.619923Z"}, {"uuid": "0caf9301-294d-4f26-b2d3-7360cf6b8c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91877", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a PageBuilderCK-CVE-2026-56290-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sagsooz\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 10:21:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPage Builder CK for Joomla - Unauthenticated SSRF / Remote File Write leading to PHP execution Exploiter\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:28.900288Z"}, {"uuid": "35fc160a-dbd5-4f38-ad57-9baf64b81518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92450", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56290\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Jenderal92\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 04:34:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-56290 - Mass Exploit for Joomla Com_pagebuilderck component (Unrestricted File Upload \u2192 RCE). Multi-threaded, automatic CSRF bypass, PHP shell uploader.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:32.632625Z"}, {"uuid": "a207ef22-7647-45eb-b4d7-7f8659864bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://t.me/bdufstecru/3301", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 browse.ajaxAddPicture \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f PageBuilder CK \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u044b\u043c Joomla \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0442\u0438\u043f\u0430 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09466\nCVE-2026-56290\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.6.0 \u0438 \u0432\u044b\u0448\u0435:\nhttps://www.joomlack.fr/en/joomla-extensions/page-builder-ck", "creation_timestamp": "2026-07-15T00:00:35.623979Z"}, {"uuid": "911e2ec7-088b-4948-b64f-ebe31088f340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://t.me/GithubRedTeam/93302", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdenis77\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 23:08:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMendeteksi versi (passive detection) & Exploitation CVE POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:07.124072Z"}, {"uuid": "27604a56-4575-42e3-881b-2c33a216bfdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://t.me/GithubRedTeam/93247", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291.yaml\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rimbadirgantara\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 14:53:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nnuclei template for CVE-2026-56291\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:07.351144Z"}, {"uuid": "5e492558-bdfc-4dd6-9dc9-e5b382460f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqrqmzaybj2j", "content": "Four critical CVEs. One breach. Two threat stories. All in one week.\n\nCVE-2026-23697, CVE-2026-23698, CVE-2026-34038, CVE-2026-56291.\nThat's four separate vendors with critical flaws in seven days.\n\nhttps://www.yazoul.net/news/article/2026-w28-weekly-threat-roundup/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-07-16T17:19:54.687780Z"}, {"uuid": "8907aea9-c95e-4f70-8ccc-56ba6f444736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "Telegram/vOHofO2qPvPXIyPNButd37pf6Fhua5DFTWTRaJatxt7pU5Q", "content": "", "creation_timestamp": "2026-07-16T19:00:08.411149Z"}, {"uuid": "5ec46ee8-1c06-4b30-87c4-1adb82a97d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "Telegram/ebH1a5NEotKwG91diqH39hoyWyfpt3aLkL269Yr45ItICbU", "content": "", "creation_timestamp": "2026-07-16T19:00:08.260260Z"}, {"uuid": "36f5aee3-c2a8-45c6-9ca6-7073d2e1e8f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "Telegram/oDFyWiNGkKzdVLDY4slluILFzkbL_4i7oCGEvzyDGB2VYCQ", "content": "", "creation_timestamp": "2026-07-16T19:00:16.975098Z"}, {"uuid": "96694432-08a1-485e-8ce6-e534edcbb100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "Telegram/vOHofO2qPvPXIyPNButd37pf6Fhua5DFTWTRaJatxt7pU5Q", "content": "", "creation_timestamp": "2026-07-17T00:00:09.158329Z"}, {"uuid": "81d88c11-a623-418d-9171-5e62b15f2711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "Telegram/ebH1a5NEotKwG91diqH39hoyWyfpt3aLkL269Yr45ItICbU", "content": "", "creation_timestamp": "2026-07-17T00:00:09.494754Z"}, {"uuid": "e7bf7aba-4069-4264-976c-31d6a900e726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "Telegram/oDFyWiNGkKzdVLDY4slluILFzkbL_4i7oCGEvzyDGB2VYCQ", "content": "", "creation_timestamp": "2026-07-17T00:00:32.398034Z"}, {"uuid": "f9fb9e54-fbb2-4a99-80f6-ba8d00de98d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93247", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291.yaml\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rimbadirgantara\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 14:53:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nnuclei template for CVE-2026-56291\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:49.405098Z"}, {"uuid": "d0a24a79-baf5-4e5e-8bc4-d778693966a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93302", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdenis77\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 23:08:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMendeteksi versi (passive detection) & Exploitation CVE POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:49.667680Z"}, {"uuid": "5ba21c11-eca9-4a3a-830b-c5fce804b83e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "published-proof-of-concept", "source": "Telegram/oDFyWiNGkKzdVLDY4slluILFzkbL_4i7oCGEvzyDGB2VYCQ", "content": "", "creation_timestamp": "2026-07-18T00:00:33.528596Z"}, {"uuid": "cd23b90d-9aa6-4b98-bcef-1c06fadee372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56297", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqv4uzlaj623", "content": "\ud83d\udccc CVE-2026-56297 - FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to improper synchronization of ch... https://www.cyberhub.blog/cves/CVE-2026-56297", "creation_timestamp": "2026-07-18T01:37:07.239107Z"}, {"uuid": "dd5d666f-5be1-4bbf-aafc-56738314f49e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-56291.yaml", "content": "", "creation_timestamp": "2026-07-18T09:00:08.373469Z"}, {"uuid": "7abc73fd-b3b2-4693-966b-40759d0cc733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://t.me/GithubRedTeam/94057", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291_PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChiefYoru\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 22:12:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:08.476058Z"}, {"uuid": "8f659f27-8688-4059-83e5-1de40031cbc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94112", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56290_PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChiefYoru\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 08:07:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T10:00:03.193816Z"}, {"uuid": "e2c5c1d0-b6a3-430d-a0cd-1802387c5cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94112", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56290_PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChiefYoru\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 08:07:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T00:00:26.328372Z"}, {"uuid": "ae2795bf-9801-4d9f-ab7d-329aa72b5363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94057", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291_PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChiefYoru\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 22:12:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T00:00:26.784165Z"}, {"uuid": "6ef0d216-893f-408f-a739-cecd631f999c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "published-proof-of-concept", "source": "Telegram/FDMKvNPIu9DVJe1ShZsaOgvp3N-Hw55ecDYO_07oxLxjtOE", "content": "", "creation_timestamp": "2026-07-20T18:00:04.694276Z"}, {"uuid": "8f6b9048-51cf-45f7-b733-7a0845df79ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc", "content": "", "creation_timestamp": "2026-07-20T18:00:05.536250Z"}, {"uuid": "833bd1f6-2d46-492b-957b-e86c581fe59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc", "content": "", "creation_timestamp": "2026-07-21T00:00:32.694907Z"}, {"uuid": "12431d82-3b94-49f7-9030-d48dc69273d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "published-proof-of-concept", "source": "Telegram/FDMKvNPIu9DVJe1ShZsaOgvp3N-Hw55ecDYO_07oxLxjtOE", "content": "", "creation_timestamp": "2026-07-21T00:00:30.140463Z"}, {"uuid": "4cf1f804-ffd2-4bd0-94fa-7b80413d0cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mr6lftkhn22h", "content": "PageBuilder CK 'fixed' its upload RCE (CVE-2026-56290) in 3.6.0, but only added a login check. Any Editor could still run code up to 3.6.2. Now properly fixed in 3.6.3. Update now.\n\nmysites.guru/blog/pagebui...", "creation_timestamp": "2026-07-21T19:51:01.569738Z"}, {"uuid": "a096eaa3-3fc3-4fef-9037-2cc535d0e4b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc", "content": "", "creation_timestamp": "2026-07-22T00:00:07.915147Z"}, {"uuid": "13aeb9ff-9c60-409c-a8ef-11d15745fb54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mrchylmopz2p", "content": "PageBuilder CK 'fixed' its upload RCE (CVE-2026-56290) in 3.6.0, but only added a login check. Any Editor could still run code up to 3.6.2. Now properly fixed in 3.6.3. Update now.\n\nmysites.guru/blog/pagebui...", "creation_timestamp": "2026-07-23T09:00:34.149470Z"}]}