0xgh057r3c0n/CVE-2026-48907

PoC

CVE-2025-48907 - Unauthenticated RCE exploit for Joomla JCE < 2.9.99.5

view exploit source poc_in_githubauthor 0xgh057r3c0npublished 2026-06-22catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-48907US	critical9.8OT critical	16.2% (97th)	KEV	2026-06-05
A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.
CVE-2025-48907US	—	0.11% (1st)	Exploit	2025-06-06
Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.