CVE-2026-88856Disclosure

LOWCVSS 9.4 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions updateOSGallery(), reached via task=update_osgallery, read a JSON request body and called the value of a method field as a live PHP function, passing the value of a package field as its single argument, with no allow-list or is_callable() check of any kind. Any function name compatible with a single argument was directly reachable, including system, exec, shell_exec, and passthru.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://www.OrdaSoft.com/

Weakness type (CWE)

CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-09-20); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

Cybersecurity News DE@cybsecuritynews44d
Disclosure
#schwachstellen Kritische Lücken in OrdaSoft Joomla Gallery: SQL-Injection und RCE bedrohen Joomla-Sites #cve202688854 #cve202688856 #cve202688857 #joomla #joomlagallery #ordasoft https://cybersecurity-news.de/ordasoft-joomla-gallery-schwachstellen-cve-2026-88854-cve-2026-88856-cve-2026-88857
Post summary
The text announces critical vulnerabilities (SQLi and RCE) in OrdaSoft Joomla Gallery affecting multiple CVEs but does not mention active exploitation, PoC, exploits, or patches.
0000028
13 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-88856 Joomla Extension - https://OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions updateOSGal… https://www.cve.org/CVERecord?id=CVE-2026-88856
Post summary
The tweet discloses details about CVE‑2026‑88856, an authenticated, privileged remote code execution vulnerability in the OrdaSoft Joomla Gallery extension for Joomla versions earlier than 6.2.7.
00000905
58.1K followersView on X

Explore more

Back to dashboard