{"schema":"vulnpedia.research/1","cve":"CVE-2026-48908","references":[{"url":"https://www.joomshaper.com/page-builder","tags":["product","Product"],"source":"mitre","sourceId":"Joomla","modified":"2026-10-08T04:52:00.233Z","origins":[{"source":"mitre","sourceId":"Joomla","modified":"2026-10-08T04:52:00.233Z","url":"https://www.joomshaper.com/page-builder"},{"source":"nvd","sourceId":"CVE-2026-48908","modified":"2026-10-25T23:10:00.167","url":"https://www.joomshaper.com/page-builder"}]},{"url":"https://mysites.guru/blog/sp-page-builder-zero-day-uploadcustomicon-rce/","tags":["third-party-advisory","Third Party Advisory","KEV report"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-07T18:12:31.343Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-07T18:12:31.343Z","url":"https://mysites.guru/blog/sp-page-builder-zero-day-uploadcustomicon-rce/"},{"source":"nvd","sourceId":"CVE-2026-48908","modified":"2026-10-25T23:10:00.167","url":"https://mysites.guru/blog/sp-page-builder-zero-day-uploadcustomicon-rce/"},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://mysites.guru/blog/sp-page-builder-zero-day-uploadcustomicon-rce/"}]},{"url":"https://www.joomshaper.com/forum/question/45152","tags":["vendor-advisory","Issue Tracking"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-07T18:12:31.343Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-07T18:12:31.343Z","url":"https://www.joomshaper.com/forum/question/45152"},{"source":"nvd","sourceId":"CVE-2026-48908","modified":"2026-10-25T23:10:00.167","url":"https://www.joomshaper.com/forum/question/45152"}]},{"url":"https://extensions.joomla.org/extension/sp-page-builder/","tags":["patch","Product"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-07T18:12:31.343Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-07T18:12:31.343Z","url":"https://extensions.joomla.org/extension/sp-page-builder/"},{"source":"nvd","sourceId":"CVE-2026-48908","modified":"2026-10-25T23:10:00.167","url":"https://extensions.joomla.org/extension/sp-page-builder/"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48908","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-07T18:12:31.343Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-07T18:12:31.343Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48908"},{"source":"nvd","sourceId":"CVE-2026-48908","modified":"2026-10-25T23:10:00.167","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48908"}]},{"source":"euvd","sourceId":"EUVD-2026-38110","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38110","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-38110","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38110"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://previdian.com/CVE-2026-48908","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://previdian.com/CVE-2026-48908"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-07-16","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-07-16"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-07-17","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-07-17"}]},{"url":"https://fortiguard.fortinet.com/outbreak-alert/joomla-sp-page-builder-rce","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://fortiguard.fortinet.com/outbreak-alert/joomla-sp-page-builder-rce"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-02","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-02"}]},{"url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-18","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-18"}]},{"url":"https://www.acn.gov.it/portale/documents/20119/1300791/Operational_Summary_lug26_CLEAR.pdf/88b05799-3e4c-f3ed-4a42-d9e68e080604?t=1787220905144","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://www.acn.gov.it/portale/documents/20119/1300791/Operational_Summary_lug26_CLEAR.pdf/88b05799-3e4c-f3ed-4a42-d9e68e080604?t=1787220905144"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-27","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-27"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-31","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-31"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-09-11","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-09-11"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-09-15","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-09-15"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-10-07","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-10-07"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-10-08","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-10-08"}]},{"url":"https://vulncheck.com/xdb/e28c557bcdbd","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"e28c557bcdbd","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e28c557bcdbd","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/e28c557bcdbd"}]},{"url":"https://github.com/papageo75/CVE-2026-48908-PoC","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"e28c557bcdbd","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e28c557bcdbd","modified":"2026-06-15T00:00:00Z","url":"https://github.com/papageo75/CVE-2026-48908-PoC"}]},{"url":"https://vulncheck.com/xdb/e3958f7a3201","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"e3958f7a3201","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e3958f7a3201","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/e3958f7a3201"}]},{"url":"https://github.com/ayiezola/CVE-2026-48908","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"e3958f7a3201","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e3958f7a3201","modified":"2026-06-15T00:00:00Z","url":"https://github.com/ayiezola/CVE-2026-48908"}]},{"url":"https://vulncheck.com/xdb/0efe6575ea41","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"0efe6575ea41","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0efe6575ea41","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/0efe6575ea41"}]},{"url":"https://github.com/bayu06802/CVE-2026-48908","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"0efe6575ea41","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0efe6575ea41","modified":"2026-06-15T00:00:00Z","url":"https://github.com/bayu06802/CVE-2026-48908"}]},{"url":"https://vulncheck.com/xdb/dc535d74e124","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"dc535d74e124","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"dc535d74e124","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/dc535d74e124"}]},{"url":"https://github.com/cazzysoci/cve-2026-48908","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"dc535d74e124","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"dc535d74e124","modified":"2026-06-15T00:00:00Z","url":"https://github.com/cazzysoci/cve-2026-48908"}]},{"url":"https://vulncheck.com/xdb/eea8c198a678","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"eea8c198a678","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"eea8c198a678","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/eea8c198a678"}]},{"url":"https://github.com/yora1928/CVE-2026-48908-by-yora","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"eea8c198a678","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"eea8c198a678","modified":"2026-06-15T00:00:00Z","url":"https://github.com/yora1928/CVE-2026-48908-by-yora"}]},{"url":"https://vulncheck.com/xdb/e869f79b9172","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"e869f79b9172","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e869f79b9172","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/e869f79b9172"}]},{"url":"https://github.com/winrarzipsexploit/CVE-2026-48908","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"e869f79b9172","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e869f79b9172","modified":"2026-06-15T00:00:00Z","url":"https://github.com/winrarzipsexploit/CVE-2026-48908"}]},{"url":"https://vulncheck.com/xdb/e4bf1537af36","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"e4bf1537af36","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e4bf1537af36","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/e4bf1537af36"}]},{"url":"https://github.com/theendofabbys/CVE-2026-48908","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"e4bf1537af36","modified":"2026-06-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e4bf1537af36","modified":"2026-06-15T00:00:00Z","url":"https://github.com/theendofabbys/CVE-2026-48908"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/papageo75/CVE-2026-48908-PoC","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self-cleaning, token-guarded. Authorized testing only.","modified":"2026-09-24T17:55:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/papageo75/CVE-2026-48908-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-09-24T17:55:12Z","url":"https://github.com/papageo75/CVE-2026-48908-PoC"}],"tags":[]},{"url":"https://github.com/gagaltotal/CVE-2026-48908-SP-Page-Builder-Joomla","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"CVE-2026-48908 - SP Page Builder Joomla Unauthenticated RCE ","modified":"2026-06-24T15:40:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/gagaltotal/CVE-2026-48908-SP-Page-Builder-Joomla"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-06-24T15:40:38Z","url":"https://github.com/gagaltotal/CVE-2026-48908-SP-Page-Builder-Joomla"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-48908","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"CVE-2026-48908","modified":"2026-07-25T06:49:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/0xBlackash/CVE-2026-48908"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-07-25T06:49:11Z","url":"https://github.com/0xBlackash/CVE-2026-48908"}],"tags":[]},{"url":"https://github.com/ayiezola/CVE-2026-48908","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"Unauthenticated RCE PoC for CVE-2026-48908  SP Page Builder (Joomla) arbitrary file upload and remote code execution exploit with mass scaning support.","modified":"2026-06-28T23:54:06Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/ayiezola/CVE-2026-48908"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-06-28T23:54:06Z","url":"https://github.com/ayiezola/CVE-2026-48908"}],"tags":[]},{"url":"https://github.com/bayu06802/CVE-2026-48908","source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-07-05T14:10:31Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/bayu06802/CVE-2026-48908"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-07-05T14:10:31Z","url":"https://github.com/bayu06802/CVE-2026-48908"}],"tags":[]},{"url":"https://github.com/Jenderal92/CVE-2026-48908","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"CVE-2026-48908 — PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. Multi‑threaded, case‑bypass, shell verification. For authorized security testing only.","modified":"2026-08-13T19:43:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/Jenderal92/CVE-2026-48908"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-08-13T19:43:38Z","url":"https://github.com/Jenderal92/CVE-2026-48908"}],"tags":[]},{"url":"https://github.com/g0thamRabb1t/CVE-2026-48908-joomla-sp-page-builder-detection","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"Laboratory validation of CVE-2026-48908 in Joomla SP Page Builder, covering unauthorized icon upload, PHP file write, code execution as www-data, auditd and PCAP evidence, event timeline reconstruction, and SOC detection recommendations. Includes Polish and English reports.","modified":"2026-07-09T20:55:31Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/g0thamRabb1t/CVE-2026-48908-joomla-sp-page-builder-detection"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-07-09T20:55:31Z","url":"https://github.com/g0thamRabb1t/CVE-2026-48908-joomla-sp-page-builder-detection"}],"tags":[]},{"url":"https://github.com/imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"Technical analysis and advisory for CVE-2026-48908: Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder.","modified":"2026-07-27T09:50:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-07-27T09:50:36Z","url":"https://github.com/imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE"}],"tags":[]},{"url":"https://github.com/yora1928/CVE-2026-48908-by-yora","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"Passive security checker for CVE-2026-48908 affecting SP Page Builder.","modified":"2026-08-20T12:10:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/yora1928/CVE-2026-48908-by-yora"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-08-20T12:10:50Z","url":"https://github.com/yora1928/CVE-2026-48908-by-yora"}],"tags":[]},{"url":"https://github.com/winrarzipsexploit/CVE-2026-48908","source":"poc-in-github","sourceId":"CVE-2026-48908","description":"CVE-2026-48908 SP Page Builder (Joomla) unauth RCE suite — authorized testing only","modified":"2026-09-17T18:44:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/winrarzipsexploit/CVE-2026-48908"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-09-17T18:44:16Z","url":"https://github.com/winrarzipsexploit/CVE-2026-48908"}],"tags":[]},{"url":"https://github.com/theendofabbys/CVE-2026-48908","source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-10-08T12:09:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48908","url":"https://github.com/theendofabbys/CVE-2026-48908"},{"source":"poc-in-github","sourceId":"CVE-2026-48908","modified":"2026-10-08T12:09:36Z","url":"https://github.com/theendofabbys/CVE-2026-48908"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"e28c557bcdbd","url":"https://vulncheck.com/xdb/e28c557bcdbd","cve":"CVE-2026-48908","dateAdded":"2026-06-22T09:31:27Z","modified":"2026-06-15T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/papageo75/CVE-2026-48908-PoC","observations":[{"dateAdded":"2026-06-22T09:31:27Z","exploitType":"initial-access"},{"dateAdded":"2026-06-22T12:56:18Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"e28c557bcdbd","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/e28c557bcdbd"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"e3958f7a3201","url":"https://vulncheck.com/xdb/e3958f7a3201","cve":"CVE-2026-48908","dateAdded":"2026-06-29T09:58:28Z","modified":"2026-06-15T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/ayiezola/CVE-2026-48908","observations":[{"dateAdded":"2026-06-29T09:58:28Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"e3958f7a3201","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/e3958f7a3201"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"0efe6575ea41","url":"https://vulncheck.com/xdb/0efe6575ea41","cve":"CVE-2026-48908","dateAdded":"2026-07-06T12:55:30Z","modified":"2026-06-15T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/bayu06802/CVE-2026-48908","observations":[{"dateAdded":"2026-07-06T12:55:30Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"0efe6575ea41","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/0efe6575ea41"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"dc535d74e124","url":"https://vulncheck.com/xdb/dc535d74e124","cve":"CVE-2026-48908","dateAdded":"2026-07-10T12:52:36Z","modified":"2026-06-15T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/cazzysoci/cve-2026-48908","observations":[{"dateAdded":"2026-07-10T12:52:36Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"dc535d74e124","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/dc535d74e124"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"eea8c198a678","url":"https://vulncheck.com/xdb/eea8c198a678","cve":"CVE-2026-48908","dateAdded":"2026-08-12T17:54:06Z","modified":"2026-06-15T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/yora1928/CVE-2026-48908-by-yora","observations":[{"dateAdded":"2026-08-12T17:54:06Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"eea8c198a678","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/eea8c198a678"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"e869f79b9172","url":"https://vulncheck.com/xdb/e869f79b9172","cve":"CVE-2026-48908","dateAdded":"2026-09-25T12:58:22Z","modified":"2026-06-15T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/winrarzipsexploit/CVE-2026-48908","observations":[{"dateAdded":"2026-09-25T12:58:22Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"e869f79b9172","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/e869f79b9172"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"e4bf1537af36","url":"https://vulncheck.com/xdb/e4bf1537af36","cve":"CVE-2026-48908","dateAdded":"2026-10-08T15:22:36Z","modified":"2026-06-15T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/theendofabbys/CVE-2026-48908","observations":[{"dateAdded":"2026-10-08T15:22:36Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"e4bf1537af36","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/xdb/e4bf1537af36"}]}],"vendorStatements":[],"exploitationSources":[{"source":"euvd","sourceId":"EUVD-2026-38110","catalog":"ENISA EU KEV","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38110","dateAdded":"2026-07-06","origins":[{"source":"euvd","sourceId":"EUVD-2026-38110","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38110"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-06-15T00:00:00Z","modified":"2026-06-15T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":true,"vendorProject":"JoomShaper","product":"SP Page Builder","dueDate":"2026-07-10T00:00:00Z","cisaDateAdded":"2026-07-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","modified":"2026-06-15T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://mysites.guru/blog/sp-page-builder-zero-day-uploadcustomicon-rce/","dateAdded":"2026-06-15T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://mysites.guru/blog/sp-page-builder-zero-day-uploadcustomicon-rce/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2026-48908","dateAdded":"2026-07-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://previdian.com/CVE-2026-48908"},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-07-16","dateAdded":"2026-07-16T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-07-16"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-07-17","dateAdded":"2026-07-17T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-07-17"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://fortiguard.fortinet.com/outbreak-alert/joomla-sp-page-builder-rce","dateAdded":"2026-07-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://fortiguard.fortinet.com/outbreak-alert/joomla-sp-page-builder-rce"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-02","dateAdded":"2026-08-02T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-02"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape","dateAdded":"2026-08-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-18","dateAdded":"2026-08-18T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-18"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://www.acn.gov.it/portale/documents/20119/1300791/Operational_Summary_lug26_CLEAR.pdf/88b05799-3e4c-f3ed-4a42-d9e68e080604?t=1787220905144","dateAdded":"2026-08-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://www.acn.gov.it/portale/documents/20119/1300791/Operational_Summary_lug26_CLEAR.pdf/88b05799-3e4c-f3ed-4a42-d9e68e080604?t=1787220905144"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-27","dateAdded":"2026-08-27T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-27"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-31","dateAdded":"2026-08-31T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-08-31"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-09-11","dateAdded":"2026-09-11T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-09-11"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-09-15","dateAdded":"2026-09-15T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-09-15"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-10-07","dateAdded":"2026-10-07T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-10-07"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-10-08","dateAdded":"2026-10-08T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-48908","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-48908&date=2026-10-08"}]}]}