CVE-2026-65891

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.joomlacontenteditor.net/	Product

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:widgetfactorylimited:jce:::::core:joomla\!::
	cpe:2.3:a:widgetfactorylimited:jce:::::pro:joomla\!::

History

No history.

Information

Published : 2026-07-29 13:19

Updated : 2026-08-05 20:27

NVD link : CVE-2026-65891

Mitre link : CVE-2026-65891

CVE.ORG link : CVE-2026-65891

JSON object : View

Products Affected

widgetfactorylimited

jce

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2026-65891", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-65891", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-30T13:34:28.287307Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security@joomla.org", "affectedData": [{"vendor": "joomlacontenteditor.net", "product": "Joomla Content Editor (JCE) extension for Joomla", "versions": [{"status": "affected", "version": "1.0.0-2.9.99.9"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-29T13:19:10.980", "references": [{"url": "https://www.joomlacontenteditor.net/", "tags": ["Product"], "source": "security@joomla.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@joomla.org", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced."}], "lastModified": "2026-08-05T20:27:35.390", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:widgetfactorylimited:jce:*:*:*:*:core:joomla\\!:*:*", "vulnerable": true, "matchCriteriaId": "1B8BE577-9064-4B55-87CA-F4527791CE1A", "versionEndExcluding": "2.20.2"}, {"criteria": "cpe:2.3:a:widgetfactorylimited:jce:*:*:*:*:pro:joomla\\!:*:*", "vulnerable": true, "matchCriteriaId": "7B0A0F8F-3E65-4CD3-8B0D-E370CC3C7B33", "versionEndExcluding": "2.20.2"}], "operator": "OR"}]}], "sourceIdentifier": "security@joomla.org"}