HIGHVulnerability
Verified
Global

CISA KEV: Joomlack Page Builder — Joomlack Page Builder Improper Access Control Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.

Analysis

Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload. Added to CISA Known Exploited Vulnerabilities catalog on 2026-07-07. Remediation due: 2026-07-10.

Indicators of Compromise (1)

CVE (1)
CVE-2026-56290
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jul 7, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

UniCredit, Accenture, and IBM join forces for pan-European banking expansion

UniCredit, one of Europe's leading pan-European banking groups, Accenture and IBM have announced a long-term strategic collaboration that establishes the technology foundation supporting UniCredit's growth across the thirteen European markets in which the Group operates.

Finextra
MEDIUMVulnerabilityNEW

South African crypto platform Luno to axe 20% of staff

Digital Currency Group’s crypto exchange Luno will cut 20% of its global staff in restructures, Bloomberg reported on Tuesday.

Finextra
MEDIUMVulnerabilityNEW

Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks

Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no further operator input in the session. The operator, tracked through the aliases knaithe and KnYuan,

The Hacker News