Joomlack Page Builder Improper Access Control Vulnerability
Critical Listed in CISA KEV
Summary
Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- Joomlack:Page Builder
Sources
- CISA KEV DATABASE
Original Links
- https://nvd.nist.gov/vuln/detail/CVE-2026-56290 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog kev
- https://www.joomlack.fr/en/joomla-extensions/page-builder-ck reference
- https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk reference
- https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk reference
Timeline
- kev_added CISA KEV
- kev_ingest CISA KEV