CVE-2026-67286CWE-22path-traversal

CVE-2026-67286

published August 12, 2026

CVSS
6.3
EPSS
1%
Percentile
43.2
In the wild
Unconfirmed
What it is

Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name.

The record
Technical detail
CVSS
6.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00518 · 43.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-12T19:18Z
References (1)
https://www.joomshaper.com/page-builder · [email protected]
EPSS history
Timeline
  • 12 AUG 13:58Z
    Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0
    cvelistv5