VULNERABILITY INTELLIGENCE
CVE-2026-65878
EPSS probability0.49%
CISA KEVNot currently listed
Published2026-07-27
Last modified2026-10-24
Description
Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1- Improper path validation and ACL checks lead to a file deletion vector in the media manager.
Weakness classification
- security@joomla.org: CWE-22