CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
Affected vendors and products
More on Execution
Other advisories
- Not ratedCVE-2026-16306INFINITT Healthcare System Manager: Remote Code Execution (RCE)
- Not ratedCVE-2026-16306INFINITT Healthcare System Manager: Remote Code Execution (RCE)
- Not ratedosv:CLEANSTART-2024-XG79226When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution
- Not ratedosv:CLEANSTART-2026-YK18302During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data
- Not ratedosv:CLEANSTART-2023-BN75372Exim libspf2 Integer Underflow Remote Code Execution Vulnerability
- Not ratedosv:CLEANSTART-2024-US02073Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker
- Not ratedosv:CLEANSTART-2024-AH27433code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2
- Not ratedosv:CLEANSTART-2023-VL53503potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3
Other news entries
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacksNewsBleepingComputer
- From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion pathsNewsMicrosoft Threat Intelligence
- WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursNewsThe Hacker News
- Anthropic AI model finds Linux kernel bug that leads to remote root accessNewsCSO Online
- Erneut kritischer Bug in Linux TCP/IP aufgedeckt – Updates in ArbeitNewsheise Security
- Fresh WordPress Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
- Cohere’s Qwen Story: Looks More Like Model JaggednessNewsCheck Point Research
- Adobe, Veeam, Juniper Networks Patch Critical VulnerabilitiesNewsSecurityWeek
Source: https://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.html
ID