{"vulnerability": "cve-2026-63048", "sightings": [{"uuid": "e370d2b6-17c3-441b-92fc-7b513de11d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63048", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr7wezhseo2r", "content": "CVE-2026-63048\nThe Joomla Page Builder CK extension allows authenticated users to upload arbitrary files. This means an attacker could upload malicious code, which could then be executed on the website, potentially leading to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-22T08:40:04.892498Z"}, {"uuid": "c7727464-550a-4cf2-b2b2-5327a1e446e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63048", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr7wyuajaw23", "content": "CVE-2026-63048 - Joomla Extension - joomlack.fr - Improper access control in Page Builder CK\nCVE ID : CVE-2026-63048\n \n Published : July 22, 2026, 8:16 a.m. | 19\u00a0minutes ago\n \n Description : The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file ...", "creation_timestamp": "2026-07-22T08:51:10.424339Z"}, {"uuid": "629796dc-c995-4511-839d-78b1c911c98e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63048", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr7xjmyauh2n", "content": "Joomla Page Builder CK (v1.0.0 \u2013 3.6.2) hit by CRITICAL vuln (CVE-2026-63048): unrestricted file uploads enable RCE. No patch yet \u2014 limit access, monitor for updates. https://radar.offseq.com/threat/cve-2026-63048-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-joomlackfr-page-builder-...", "creation_timestamp": "2026-07-22T09:00:33.530377Z"}, {"uuid": "57bc73e6-e7db-4a51-98cb-12a94e72c72f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63048", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116962809019529853", "content": "CVE-2026-63048 (CRITICAL, CVSS 9.4): joomlack.fr Page Builder CK for Joomla (v1.0.0 \u2013 3.6.2) lets authenticated users upload arbitrary files, enabling RCE. No patch \u2014 restrict usage & monitor for updates. https://radar.offseq.com/threat/cve-2026-63048-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-joomlackfr-page-builder-ck-3921dbf365864886 #OffSeq #Joomla #RCE #Vuln", "creation_timestamp": "2026-07-22T09:00:43.448175Z"}]}