Known vulnerabilities in JCE

Software: JCE
Software CPE: cpe:2.3:a:widget_factory:jce:*:*:*:*:*:joomla:*:*
Total vulnerabilities: 1
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JCE JCE is affected by 1 known vulnerabilities: 1 critical Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134939 - Unrestricted Upload of File with Dangerous Type
CVE-2026-48907
CWE-434 Critical
Available
Exploited
2.9.99.6 19.06.2026 SB20260619103