Exploit for Improper Access Control in Widgetfactorylimited Jce

githubexploit · 2026-08-21

Description

RCE in Joomla JCE via improper access control (CVE-2026-48907) with interactive shell.

Entry point

Parametertask · upload data

Path/index.php?option=com_jce

Unauthenticated profile import endpoint used to upload a crafted XML payload that contains PHP code.

Affected Widgetfactorylimited Jce versions

Widgetfactorylimited Jce< 2.9.99.5

All known vulnerabilities by product

CVSS 10.0 for CVE-2026-48907

10.0

HIGH SEVERITY

Version 4.0

VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H/E:A/AU:Y/U:Red

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:NONE

Working code

90%confidence this exploit runs

Based on 2 file(s) in the source

Exploit Details

Modified:2026-08-21 17:33

Last Seen:2026-08-21 17:36

Reporter:CerberusMrXi

Written in:Python

Last commit:2026-08-21

Tags

Joomla JCEimproper access controlremote code executionCVE-2026-48907interactive shell

Other exploits for CVE-2026-48907

2026-08-25 KitPloitKITPLOIT

Joomla_CVE_2026_48907

2026-08-25 KitPloitKITPLOIT

2026-08-25 KitPloitKITPLOIT

2026-08-24 KitPloitKITPLOIT

Joomla JCE_2.9.15 - Remote Code Execution

2026-08-17 Jared BritsEXPLOITDBPython

Joomla JCE 2.9.99.4 Remote Code Execution

2026-08-11 Jared BritsPACKETSTORMPython

Joomla 2.9.99.4 - Unauthenticated Remote Code Execution

2026-08-10 Jared BritsEXPLOITDBPython

📄 Joomla Content Editor 2.9.99.4 Shell Upload

2026-07-29 ispyispyispy, Uwe Flottemesch, David JardinPACKETSTORMRuby

Exploit Code

README3 lines

## https://sploitus.com/exploit?id=BB3A85A9-468E-5902-9898-74122FCE6534
# JCEzploit-CVE-2026-48907
JCEzploit is a powerful, fully-automated RCE exploit for Joomla JCE (CVE-2026-48907) featuring interactive shell, batch command execution, file download capability, and proxy support. Built with Python &amp; Rich for penetration testers. Ethical use only. By Sudeepa Wanigarathna.