{"schema":"vulnpedia.poc/1","cve":"CVE-2026-56290","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-07-07","ransomware":false},"epss":{"score":0.30866,"percentile":0.98238},"cvss":{"version":"4.0","score":10,"severity":"CRITICAL","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/1e34893b8b9a","executable":false,"sourceId":"1e34893b8b9a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1e34893b8b9a","modified":"2026-06-27T00:00:00Z","url":"https://vulncheck.com/xdb/1e34893b8b9a"}],"repositoryUrl":"https://github.com/shinthink/pbck-exploit"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/0729778835c6","executable":false,"sourceId":"0729778835c6","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0729778835c6","modified":"2026-06-27T00:00:00Z","url":"https://vulncheck.com/xdb/0729778835c6"}],"repositoryUrl":"https://github.com/Jenderal92/CVE-2026-56290"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/8d90489e52a0","executable":false,"sourceId":"8d90489e52a0","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8d90489e52a0","modified":"2026-06-27T00:00:00Z","url":"https://vulncheck.com/xdb/8d90489e52a0"}],"repositoryUrl":"https://github.com/katranSefa/CVE-2026-56290"},{"kind":"exploitdb","id":"52626","url":"https://www.exploit-db.com/exploits/52626","code":"https://www.exploit-db.com/download/52626","executable":true}],"poc_candidates":[{"url":"https://github.com/sagsooz/PageBuilderCK-CVE-2026-56290-Exploit","source":"poc-in-github","sourceId":"CVE-2026-56290","description":"Page Builder CK for Joomla - Unauthenticated SSRF / Remote File Write leading to PHP execution Exploiter","modified":"2026-07-16T08:36:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56290","url":"https://github.com/sagsooz/PageBuilderCK-CVE-2026-56290-Exploit"},{"source":"poc-in-github","sourceId":"CVE-2026-56290","modified":"2026-07-16T08:36:49Z","url":"https://github.com/sagsooz/PageBuilderCK-CVE-2026-56290-Exploit"}],"tags":[]},{"url":"https://github.com/shinthink/pbck-exploit","source":"poc-in-github","sourceId":"CVE-2026-56290","description":"📤 Mass exploitation framework for CVE-2026-56290 — Page Builder CK Joomla unauthenticated file upload to RCE","modified":"2026-07-10T08:02:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56290","url":"https://github.com/shinthink/pbck-exploit"},{"source":"poc-in-github","sourceId":"CVE-2026-56290","modified":"2026-07-10T08:02:16Z","url":"https://github.com/shinthink/pbck-exploit"}],"tags":[]},{"url":"https://github.com/Jenderal92/CVE-2026-56290","source":"poc-in-github","sourceId":"CVE-2026-56290","description":"CVE-2026-56290 - Mass Exploit for Joomla Com_pagebuilderck component (Unrestricted File Upload → RCE). Multi-threaded, automatic CSRF bypass, PHP shell uploader.","modified":"2026-08-22T10:19:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56290","url":"https://github.com/Jenderal92/CVE-2026-56290"},{"source":"poc-in-github","sourceId":"CVE-2026-56290","modified":"2026-08-22T10:19:38Z","url":"https://github.com/Jenderal92/CVE-2026-56290"}],"tags":[]},{"url":"https://github.com/ChiefYoru/CVE-2026-56290_PoC","source":"poc-in-github","sourceId":"CVE-2026-56290","description":"The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.","modified":"2026-07-19T08:07:57Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56290","url":"https://github.com/ChiefYoru/CVE-2026-56290_PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-56290","modified":"2026-07-19T08:07:57Z","url":"https://github.com/ChiefYoru/CVE-2026-56290_PoC"}],"tags":[]},{"url":"https://github.com/katranSefa/CVE-2026-56290","source":"poc-in-github","sourceId":"CVE-2026-56290","modified":"2026-09-05T10:35:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56290","url":"https://github.com/katranSefa/CVE-2026-56290"},{"source":"poc-in-github","sourceId":"CVE-2026-56290","modified":"2026-09-05T10:35:44Z","url":"https://github.com/katranSefa/CVE-2026-56290"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-56290 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2026-56290 && searchsploit -m 52626","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-56290/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56290.yaml","template":"http/cves/2026/CVE-2026-56290.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-56290%22&type=repositories","executable":false}]}