PT-2026-57425 · Rsjoomla.Com · Rsjoomla.Com Rsfiles Extension For Joomla

Phil Taylor · Publicado 2026-07-11 · Atualizado 2026-07-11 · CVE-2026-57827

NVD

CVSS v4.0

10

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:Red

The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2026-57827

Produtos afetados

Rsjoomla.Com Rsfiles Extension For Joomla

Referências · 4

• https://twitter.com/UpwindMDR/status/2075897713749565806 · Publicação no Twitter
• https://rsjoomla.com/joomla-extensions/joomla-download-manager.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-57827 · Nota de Segurança
• https://mysites.guru/blog/rsfiles-unauthenticated-file-upload-rce · Nota