
CVE-2026-48907
CVE-2026-48907 – Joomla JCE Unauthenticated Remote Code Execution (RCE)
educationexploitationincident-response+8
4

CVE-2026-48907 – Joomla JCE Unauthenticated Remote Code Execution (RCE)

CVE-2026-48908 — PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. Multi‑threaded, case‑bypass, shell…