Critical CVE-2026-48907 A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution. CVSS: 10.0 · CWE: CWE-284 View on NVD