PT-2026-63330 · Unknown · Page Builder Ck

Phil Taylor · CVE-2026-63048 · Published 2026-07-22 · Updated 2026-07-22

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Page Builder CK versions prior to 3.6.2

Description An improper access control issue allows authenticated users to perform an arbitrary file upload, which can lead to Remote Code Execution (RCE), a state where an attacker can execute arbitrary commands on the host machine.

Recommendations Update Page Builder CK to version 3.6.2 or later.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-63048

Affected Products

Page Builder Ck

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-63048 · Security Note
• https://joomlack.fr · Note