CVE-2026-48907 in the Joomla JCE plugin lets unauthenticated attackers drop PHP web shells with a single crafted request.

After receiving his degree in Journalism & Media Communications from CSU in 2019, Erik began building his career in online media, and found his dream job when he joined Game Rant as a staff writer.

I'm a Fitness & Nutrition writer for CNET who enjoys reviewing the latest fitness gadgets, testing out activewear and sneakers, as well as debunking wellness/fitness myths. In my free time I enjoy ...