Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 10epss 0.4%
from disclosure to weapon18 days
Published on NVDJul 11
1st PoC+18d
exploitation probability
0.4%top 67% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red
Affected products
rsjoomla.com · rsjoomla.com RSFiles extension for Joomlapublic PoCs found — 4
githubgithub.com/shinthink/CVE-2026-57827★ 15githubgithub.com/Mohammad-008/rsfiles-CVE-2026-57827★ 9githubgithub.com/jjkk123123/CVE-2026-57827★ 1githubgithub.com/Candisexterior171/CVE-2026-57827★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.