CVE-2026-48908 — Vulnerability intelligence

ollyo — sp page builder

Published: 2026-06-20T11:57:00.501Z

CVSS

10

CISA KEV

Known exploitation

Original source text (not a translation)

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

Sources

• CVE-2026-48908
• Product
• Product
• Third Party Advisory
• US Government Resource
• Issue Tracking
• CVE-2026-48908