CVE-2026-57827

CRITICAL 9.8CVE-2026-57827 · Published 11/07/2026 · updated 25/10/2026

In short

CVE-2026-57827 is a CRITICAL (CVSS 9.8) vulnerability affecting rsfiles! (rsjoomla).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.5% of all vulnerabilities.
Fix: update to 1.17.12 or later.

Package	Affected versions	Patched versions
rsfiles! rsjoomla	`< 1.17.12`	`1.17.12`

Description

Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

References

mysites.guru/blog/rsfiles-unauthenticated-file-upload-rce · Exploit
rsjoomla.com/joomla-extensions/joomla-download-manager.html · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free