CVE-2026-63048

The Page Builder CK extension for Joomla versions prior to 3.6.2 is susceptible to improper access control, allowing authenticated users to upload arbitrary files, which can lead to remote code execution (RCE). Organizations using this extension should prioritize patching to mitigate the risk of unauthorized access and potential exploitation. This vulnerability is particularly critical for sites that handle sensitive data or have a high user interaction level.