THREATOPS

THREAT OPS › CVEs › CVE-2026-56290

CVE-2026-56290 — Joomlack Page Builder Improper Access Control Vulnerability

CISA KEVExploited: confirmedJoomlack

Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.

Vulnerability details

Affected productsPage Builder
KEV remediation due2026-07-10

Related reporting

CISA Adds Three Known Exploited Vulnerabilities to Catalogcisa_advisories
[CISA KEV] CVE-2026-56290 — Joomlack Page Builder: Joomlack Page Builder Improper Access Control Vulnerabilitycisa_kev