CVE-2026-57828 - Joomla Extension - phoca.cz - Authenticated file upload in RSFiles component < 6.1.3
CVE ID :CVE-2026-57828 Published : July 11, 2026, 10:16 a.m. | 16 minutes ago Description :The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to full RCE. Severity: 9.0 | CRITICAL ...