{"schema":"vulnpedia.poc/1","cve":"CVE-2026-48908","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-07-07","ransomware":false},"epss":{"score":0.88512,"percentile":0.9977},"cvss":{"version":"4.0","score":10,"severity":"CRITICAL","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e28c557bcdbd","executable":false,"sourceId":"e28c557bcdbd","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e28c557bcdbd","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/e28c557bcdbd"}],"repositoryUrl":"https://github.com/papageo75/CVE-2026-48908-PoC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e3958f7a3201","executable":false,"sourceId":"e3958f7a3201","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e3958f7a3201","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/e3958f7a3201"}],"repositoryUrl":"https://github.com/ayiezola/CVE-2026-48908"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/0efe6575ea41","executable":false,"sourceId":"0efe6575ea41","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0efe6575ea41","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/0efe6575ea41"}],"repositoryUrl":"https://github.com/bayu06802/CVE-2026-48908"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/dc535d74e124","executable":false,"sourceId":"dc535d74e124","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"dc535d74e124","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/dc535d74e124"}],"repositoryUrl":"https://github.com/cazzysoci/cve-2026-48908"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/eea8c198a678","executable":false,"sourceId":"eea8c198a678","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"eea8c198a678","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/eea8c198a678"}],"repositoryUrl":"https://github.com/yora1928/CVE-2026-48908-by-yora"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e869f79b9172","executable":false,"sourceId":"e869f79b9172","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e869f79b9172","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/e869f79b9172"}],"repositoryUrl":"https://github.com/winrarzipsexploit/CVE-2026-48908"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e4bf1537af36","executable":false,"sourceId":"e4bf1537af36","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e4bf1537af36","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/e4bf1537af36"}],"repositoryUrl":"https://github.com/theendofabbys/CVE-2026-48908"}],"poc_candidates":[{"url":"https://github.com/papageo75/CVE-2026-48908-PoC","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self-cleaning, token-guarded. Authorized testing only.","modified":"2026-09-24T17:55:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/papageo75/CVE-2026-48908-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-09-24T17:55:12Z","url":"https://github.com/papageo75/CVE-2026-48908-PoC"}],"tags":[]},{"url":"https://github.com/gagaltotal/CVE-2026-48908-SP-Page-Builder-Joomla","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"CVE-2026-48908 - SP Page Builder Joomla Unauthenticated RCE ","modified":"2026-06-24T15:40:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/gagaltotal/CVE-2026-48908-SP-Page-Builder-Joomla"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-06-24T15:40:38Z","url":"https://github.com/gagaltotal/CVE-2026-48908-SP-Page-Builder-Joomla"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-48908","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"CVE-2026-48908","modified":"2026-07-25T06:49:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/0xBlackash/CVE-2026-48908"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-07-25T06:49:11Z","url":"https://github.com/0xBlackash/CVE-2026-48908"}],"tags":[]},{"url":"https://github.com/ayiezola/CVE-2026-48908","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"Unauthenticated RCE PoC for CVE-2026-48908  SP Page Builder (Joomla) arbitrary file upload and remote code execution exploit with mass scaning support.","modified":"2026-06-28T23:54:06Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/ayiezola/CVE-2026-48908"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-06-28T23:54:06Z","url":"https://github.com/ayiezola/CVE-2026-48908"}],"tags":[]},{"url":"https://github.com/bayu06802/CVE-2026-48908","source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-07-05T14:10:31Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/bayu06802/CVE-2026-48908"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-07-05T14:10:31Z","url":"https://github.com/bayu06802/CVE-2026-48908"}],"tags":[]},{"url":"https://github.com/Jenderal92/CVE-2026-48908","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"CVE-2026-48908 — PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. Multi‑threaded, case‑bypass, shell verification. For authorized security testing only.","modified":"2026-08-13T19:43:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/Jenderal92/CVE-2026-48908"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-08-13T19:43:38Z","url":"https://github.com/Jenderal92/CVE-2026-48908"}],"tags":[]},{"url":"https://github.com/g0thamRabb1t/CVE-2026-48908-joomla-sp-page-builder-detection","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"Laboratory validation of CVE-2026-48908 in Joomla SP Page Builder, covering unauthorized icon upload, PHP file write, code execution as www-data, auditd and PCAP evidence, event timeline reconstruction, and SOC detection recommendations. Includes Polish and English reports.","modified":"2026-07-09T20:55:31Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/g0thamRabb1t/CVE-2026-48908-joomla-sp-page-builder-detection"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-07-09T20:55:31Z","url":"https://github.com/g0thamRabb1t/CVE-2026-48908-joomla-sp-page-builder-detection"}],"tags":[]},{"url":"https://github.com/imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"Technical analysis and advisory for CVE-2026-48908: Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder.","modified":"2026-07-27T09:50:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-07-27T09:50:36Z","url":"https://github.com/imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE"}],"tags":[]},{"url":"https://github.com/yora1928/CVE-2026-48908-by-yora","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"Passive security checker for CVE-2026-48908 affecting SP Page Builder.","modified":"2026-08-20T12:10:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/yora1928/CVE-2026-48908-by-yora"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-08-20T12:10:50Z","url":"https://github.com/yora1928/CVE-2026-48908-by-yora"}],"tags":[]},{"url":"https://github.com/winrarzipsexploit/CVE-2026-48908","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"CVE-2026-48908 SP Page Builder (Joomla) unauth RCE suite — authorized testing only","modified":"2026-09-17T18:44:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/winrarzipsexploit/CVE-2026-48908"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-09-17T18:44:16Z","url":"https://github.com/winrarzipsexploit/CVE-2026-48908"}],"tags":[]},{"url":"https://github.com/theendofabbys/CVE-2026-48908","source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-10-08T12:09:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/theendofabbys/CVE-2026-48908"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-10-08T12:09:36Z","url":"https://github.com/theendofabbys/CVE-2026-48908"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-48908 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-48908/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-48908.yaml","template":"javascript/cves/2026/CVE-2026-48908.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-48908%22&type=repositories","executable":false}]}