Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2623▼ 306 respecto a la semana anterior

Críticas / altas1347▲ 75 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 463 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-77994	Aplazada	Crítica (9.3)	0.39%	—	Joomlack Page Builder CK^AI	24/8/2026	26/8/2026	Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.
CVE-2026-77993	Aplazada	Media (5.3)	0.44%	—	Joomlack Page Builder CK^AI	24/8/2026	26/8/2026	Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter.
CVE-2026-74254	Aplazada	Crítica (9.3)	0.39%	—	Joomlack Page Builder CK^AI	17/8/2026	26/8/2026	Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.
CVE-2026-63048	Aplazada	Crítica (9.4)	0.38%	—	Joomla Page Builder CK^AI	22/7/2026	26/8/2026	Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.
CVE-2026-62414	Aplazada	Crítica (9.1)	0.40%	—	Joomlack Page Builder CK^AI	20/7/2026	23/7/2026	Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK does not properly apply access control to frontend page list views.
CVE-2026-56290	Analizada	Crítica (10)	31%	⚠ Explotación activa	Joomlack Page Builder CK	29/6/2026	24/7/2026	Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.