CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
Affected vendors and products
More on Execution
Other advisories
- CriticalCVE-2026-44267Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access
- Not ratedosv:CVE-2026-44267Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitter
- CriticalCVE-2026-44266Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels
- Not ratedosv:CVE-2026-44266Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels
- HighCVE-2026-62848Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution
- HighCVE-2026-62848Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution
- Not ratedosv:CVE-2026-116958Konflux-ci: unquoted variable expansion in shell command execution
- Not ratedCVE-2026-16306INFINITT Healthcare System Manager: Remote Code Execution (RCE)
Other news entries
- Android’s November 2026 Updates Patch Over 200 VulnerabilitiesNewsSecurityWeek
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacksNewsBleepingComputer
- From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion pathsNewsMicrosoft Threat Intelligence
- WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursNewsThe Hacker News
- Anthropic AI model finds Linux kernel bug that leads to remote root accessNewsCSO Online
- Erneut kritischer Bug in Linux TCP/IP aufgedeckt – Updates in ArbeitNewsheise Security
- Fresh WordPress Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
- Cohere’s Qwen Story: Looks More Like Model JaggednessNewsCheck Point Research
Source: https://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.html
ID