Security Advisory

CVE-2026-57828

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-11 09:27:16

Last updated 2026-07-23 14:58:47

Assigner Joomla

CVSS score 9.0

State PUBLISHED

Description

Joomla Extension - phoca.cz - Authenticated file upload in RSFiles component < 6.1.3 - The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to full RCE.

← Browse all CVEs View on cve.org ↗