CVE-2026-88857Disclosure

LOWCVSS 9.4 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveWatermark() copied an uploaded file into a web-accessible directory using the client-supplied filename exactly as sent, with no extension check, no content check, and no filename sanitisation of any kind. An authenticated core.manage user could upload a .php file disguised with an image Content-Type header and execute it directly by requesting the resulting path.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://www.OrdaSoft.com/

Weakness type (CWE)

CWE-434

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-09-20); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

Cybersecurity News DE@cybsecuritynews44d
Disclosure
#schwachstellen Kritische Lücken in OrdaSoft Joomla Gallery: SQL-Injection und RCE bedrohen Joomla-Sites #cve202688854 #cve202688856 #cve202688857 #joomla #joomlagallery #ordasoft https://cybersecurity-news.de/ordasoft-joomla-gallery-schwachstellen-cve-2026-88854-cve-2026-88856-cve-2026-88857
Post summary
The tweet discloses critical SQL injection and RCE vulnerabilities in OrdaSoft Joomla Gallery (CVE-2026-88854/56/57) threatening Joomla sites, linking to a news article without mentioning patches, exploits, or active exploitation.
0000028
13 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-88857 Joomla Extension - https://OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveWaterma… https://www.cve.org/CVERecord?id=CVE-2026-88857
Post summary
The text discloses CVE-2026-88857, an authenticated privileged remote code execution vulnerability in the OrdaSoft Joomla Gallery extension affecting versions prior to 6.2.7, with no mention of exploit code, PoC, patches, or active exploitation.
000001.3K
58.1K followersView on X

Explore more

Back to dashboard