CVE-2026-65891

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-65891", "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586", "state": "PUBLISHED", "assignerShortName": "Joomla", "dateReserved": "2026-07-23T09:31:17.506Z", "datePublished": "2026-07-29T12:37:47.658Z", "dateUpdated": "2026-07-31T05:43:27.735Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Joomla Content Editor (JCE) extension for Joomla", "vendor": "joomlacontenteditor.net", "versions": [{"status": "affected", "version": "1.0.0-2.9.99.9"}]}], "credits": [{"lang": "en", "type": "finder", "value": "M\u00fcrrez"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.10 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced."}], "value": "Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 \u2013 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586", "shortName": "Joomla", "dateUpdated": "2026-07-31T05:43:27.735Z"}, "references": [{"tags": ["product"], "url": "https://www.joomlacontenteditor.net/"}], "source": {"discovery": "UNKNOWN"}, "title": "Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.10", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-07-30T13:34:28.287307Z", "id": "CVE-2026-65891", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-30T13:35:26.801Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-65891", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-30T13:34:28.287307Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-30T13:35:03.262Z"}}], "cna": {"title": "Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.10", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "M\u00fcrrez"}], "affected": [{"vendor": "joomlacontenteditor.net", "product": "Joomla Content Editor (JCE) extension for Joomla", "versions": [{"status": "affected", "version": "1.0.0-2.9.99.9"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.joomlacontenteditor.net/", "tags": ["product"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced.", "supportingMedia": [{"type": "text/html", "value": "Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.10 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 \u2013 Improper Input Validation"}]}], "providerMetadata": {"orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586", "shortName": "Joomla", "dateUpdated": "2026-07-31T05:43:27.735Z"}}}, "cveMetadata": {"cveId": "CVE-2026-65891", "state": "PUBLISHED", "dateUpdated": "2026-07-31T05:43:27.735Z", "dateReserved": "2026-07-23T09:31:17.506Z", "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586", "datePublished": "2026-07-29T12:37:47.658Z", "assignerShortName": "Joomla"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Joomla Content Editor (JCE) extension for Joomla", "vendor": "joomlacontenteditor.net", "versions": [{"status": "affected", "version": "1.0.0-2.9.99.9"}]}], "source": "security@joomla.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:widgetfactorylimited:jce:*:*:*:*:core:joomla\\!:*:*", "matchCriteriaId": "1B8BE577-9064-4B55-87CA-F4527791CE1A", "versionEndExcluding": "2.20.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:widgetfactorylimited:jce:*:*:*:*:pro:joomla\\!:*:*", "matchCriteriaId": "7B0A0F8F-3E65-4CD3-8B0D-E370CC3C7B33", "versionEndExcluding": "2.20.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced."}, {"lang": "es", "value": "Extensi\u00f3n de Joomla - joomlacontenteditor.net - Creaci\u00f3n de archivos ocultos y sobrescritura de archivos no intencionada a trav\u00e9s de la funci\u00f3n de renombrar en Joomla Content Editor (JCE) < 2.20.2 - La validaci\u00f3n de entrada incorrecta en la funcionalidad de renombrar archivos permiti\u00f3 a un usuario autenticado con permisos de gesti\u00f3n de archivos renombrar archivos con nombres que de otro modo ser\u00edan inv\u00e1lidos, lo que result\u00f3 en la creaci\u00f3n de archivos ocultos. El problema tambi\u00e9n permiti\u00f3 que los archivos existentes en la ruta de destino fueran reemplazados de forma no intencionada."}], "id": "CVE-2026-65891", "lastModified": "2026-10-23T23:10:00.157", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-65891", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-30T13:34:28.287307Z", "version": "2.0.3"}}]}, "published": "2026-07-29T13:19:10.980", "references": [{"source": "security@joomla.org", "tags": ["Product"], "url": "https://www.joomlacontenteditor.net/"}], "sourceIdentifier": "security@joomla.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "security@joomla.org", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[1.0.0,2.9.99.9]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Joomla Content Editor (JCE) extension for Joomla", "source": "cna", "vendor": "joomlacontenteditor.net"}, "product": "joomla_content_editor_(jce)_extension_for_joomla", "vendor": "joomlacontenteditor.net"}], "created": "2026-07-29T14:45:02.753862+00:00", "updated": "2026-08-03T13:30:04.542330+00:00", "vendors": ["joomlacontenteditor.net", "joomlacontenteditor.net$PRODUCT$joomla_content_editor_(jce)_extension_for_joomla"]}