What is CVE-2026-67286?
SP Page Builder extension for Joomla, prior to version 6.8.0, contains an unauthenticated arbitrary directory creation and file write vulnerability. This allows a remote attacker to create arbitrary directories and files with predefined names on the server. Users should immediately update the extension to the latest version.
Azərbaycanca: Joomla üçün SP Page Builder əlavəsinin 6.8.0 versiyasından əvvəlki versiyalarında autentifikasiya olunmamış ixtiyari kataloq yaratma və fayl yazma zəifliyi aşkar edilmişdir. Bu, uzaqdan hücum edən şəxsə serverdə öncədən müəyyən edilmiş adla ixtiyari qovluqlar və fayllar yaratmağa imkan verir. İstifadəçilər dərhal əlavəni ən son versiyaya yeniləməlidir.
Related CVEs
link basis: shared vendor: joomshaper.com
FAQ2
Which versions of the SP Page Builder extension are affected by CVE-2026-67286?
CVE-2026-67286 affects SP Page Builder extension for Joomla prior to version 6.8.0.
What can a remote attacker achieve by exploiting CVE-2026-67286?
By exploiting this vulnerability, a remote attacker can create arbitrary directories and files with predefined names on the server.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.