PT-2026-65790 · Joomlacontenteditor.Net · Joomla Content Editor (Jce) Extension For Joomla

·

CVE-2026-65891

·

Published

2026-07-29

·

Updated

2026-07-29

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced.

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-65891

Affected Products

Joomla Content Editor (Jce) Extension For Joomla