CVE-2026-57828 – Joomla Extension – phoca.cz – Authenticated file upload in RSFiles component < 6.1.3

CVE ID :CVE-2026-57828

Published : July 11, 2026, 10:16 a.m. | 1 hour, 8 minutes ago

Description :The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to full RCE.

Severity: 9.0 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…