Joomlack: community verdicts

1 notable / known-exploited Joomlack CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Joomlack CVE, see NVD ↗.

Exploitation first, with newly exploited CVEs rising above old ones

CVE-2026-56290CRIT 9.8KEVEPSS 31%
Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.