Joomla Content Editor
No CISA KEV deadline is open. CISA last added a Joomla Content Editor CVE on 16 Jun.
Tracked since 16 Jun · latest article Wed 17 Jun · RSS
Exploited, by due date
CSV downloadDeadlines passed
6 articles from 4 outlets since 16 Jun; the latest 130 days ago.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 17 Jun · 15:40 UTC | Security Affairs | CISA flags critical Joomla JCE bug enabling remote code execution |
| Wed 17 Jun · 08:25 UTC | SecurityOnline | AdGuard blocks Joomla exploit and launches email tracking shield |
| Wed 17 Jun · 07:50 UTC | SecurityWeek | Joomla and LiteSpeed Bugs Let Attackers Run Code, Gain Root |
| Wed 17 Jun · 07:21 UTC | SecurityOnline | WooCommerce stores hit by payment skimmer (CVE-2026-48907) |
| Tue 16 Jun · 21:37 UTC | CISA | CISA Adds CVE-2026-48907 Joomla Editor Flaw to Known Exploited List |
| Tue 16 Jun · 20:50 UTC | CISA | CISA adds critical Joomla editor flaw CVE-2026-48907 to KEV |
Who reported 4 outlets, last 12 months
- CISA2
- SecurityOnline2
- Security Affairs1
- SecurityWeek1
- CISA flags critical Joomla JCE bug enabling remote code executionSecurity Affairs
- AdGuard blocks Joomla exploit and launches email tracking shieldSecurityOnline
- Joomla and LiteSpeed Bugs Let Attackers Run Code, Gain RootSecurityWeek
- WooCommerce stores hit by payment skimmer (CVE-2026-48907)SecurityOnline
- CISA Adds CVE-2026-48907 Joomla Editor Flaw to Known Exploited ListCISA · official notice
- CISA adds critical Joomla editor flaw CVE-2026-48907 to KEVCISA · official notice
All CVEs in coverage
1How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.