[CVE-2026-57827] Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The J…

Descripción técnica

Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

Puntuación CVSS

Score: 9.8/10 — Severidad: CRITICAL — Estado NIST: Modified

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Rsfiles\! — Rsjoomla

Debilidades (CWE)

CWE-434

Fuente oficial

Publicado en NIST NVD.