[vulnfeed] 2 critical CVEs — 2026-07-11 12:00 UTC
vulnfeed
Critical alert — 2026-07-11 13:59 UTC
2 new critical CVEs
in the last 5 hours — 2 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-57827CRITICAL
The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading e
The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
CVSS 10.0
CVE-2026-57828CRITICAL
The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows regis
The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to full RCE.
CVSS 9.0
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: