CVE-2026-57828
Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3
Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3 - The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to full RCE.
CVSS 4.0 · 9 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products