VulnSocial

CVE-2026-85192Patch

LOWCVSS 9.4 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0 - Conditional Content Pro accepts inline PHP Condition Rules in article syntax. In affected versions, the PHP is passed to the Conditions evaluator without checking who authored the article. Joomla's normal Author text filter preserves the syntax, so publishing the article causes the code to run as the web-server process.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-14); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-14: 1Mentions · 2026-09-15: 1Patch / Workaround · 2026-09-14: 1Technical Details · 2026-09-14: 1Technical Details · 2026-09-15: 109-1409-15
Signal classification2 categories
Patch
150.0%
Disclosure
150.0%
Classification over time
DateTotalLabels
2026-09-141
Patch1
2026-09-151
Disclosure1
Full discourse2 posts
  • Rıdvan Yağlı@ridvanyagli
    Patch

    🔴 Kritik Joomla RCE Açığı: CVE-2026-85192 Joomla için kullanılan Regular Labs Conditional Content Pro eklentisinde CVSS 9.4 (Critical) seviyesinde RCE açığı tespit edildi. Etkilenen sürümler: 1.0.0 – 7.1.0 Açık, ayrıcalıklı bir Joomla kullanıcısının makale içerisine kötü amaçlı inline PHP Condition Rule ekleyerek PHP kodunu sunucu üzerinde çalıştırabilmesine neden oluyor. Saldırganın kodu, web sunucusu prosesinin yetkileriyle çalışabiliyor. CWE-94 – Code Injection ⚠️ Conditional Content Pro kullanan Joomla yöneticilerinin sürümlerini kontrol ederek güncelleme yapmaları gerekiyor.

    Post summary

    The post discloses CVE-2026-85192, a critical RCE vulnerability (CVSS 9.4, CWE-94) in Joomla's Regular Labs Conditional Content Pro plugin affecting versions 1.0.0–7.1.0, and explicitly calls for administrators to update as remediation, but provides no named exploit tool, PoC, or active exploitation evidence.

    0302271.1K
    2.5K followersView on X
  • ByteCheck@ByteCheck101
    Disclosure

    🚨 CRITICAL JOOMLA SECURITY ALERT A CVSS 9.4 RCE vulnerability — CVE-2026-85192 — has been identified in the Regular Labs Conditional Content Pro plugin for Joomla. ⚠️ Affected versions: 1.0.0 – 7.1.0 The flaw can allow a privileged Joomla user to inject a malicious inline PHP condition into article content and execute arbitrary PHP code on the server. 🔴 CWE-94: Code Injection 🔴 Code executes with web-server process privileges 🔴 Potential impact: full server compromise #Joomla #RCE #CVE #WebSecurity #Vulnerability #AppSec #SecurityAlert

    Post summary

    The text is a security alert announcing a critical RCE vulnerability (CVE-2026-85192) in the Regular Labs Conditional Content Pro plugin for Joomla, providing technical details such as CVSS score, CWE, and affected versions, but without any mention of PoC, exploits, patches, or active exploitation.

    0000073
    16 followersView on X

Explore more

Back to dashboard