HIGHVulnerability
Verified
Global

CISA KEV: JoomShaper SP Page Builder — JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

Analysis

JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code. Added to CISA Known Exploited Vulnerabilities catalog on 2026-07-07. Remediation due: 2026-07-10.

Indicators of Compromise (1)

CVE (1)
CVE-2026-48908
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jul 7, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerability

Lloyds Banking Group and Caixabank complete tokenised deposit transactions through Project Agorá

Lloyds Banking Group has completed three live tokenised deposit transactions through tokenisation initiative Project Agorá.

Finextra
MEDIUMVulnerability

Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace

The internet giant has built an agent harness to find vulnerabilities across Chrome’s codebase. The post Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerability

FinregE publishes framework in preparation for FCA's 2026 Cryptoasset Regime

FinregE, The End-to-End Regulatory Operating System (FinregE ROS), is urging digital asset firms to fundamentally change how they prepare for the UK's regulatory landscape. To achieve this, the company has introduced a strategic framework to bridge the widening “Execution Gap” ahead of the 2026 Financial Conduct Authority (FCA) Cryptoasset Regime.

Finextra