{"id":"CVE-2026-57827","title":"The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.","summary":"The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.","severity":"none","cwe":["CWE-434"],"published":"2026-07-11","updated":"2026-07-11","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-57827","references":[{"url":"https://mysites.guru/blog/rsfiles-unauthenticated-file-upload-rce/","label":"security@joomla.org"},{"url":"https://www.rsjoomla.com/joomla-extensions/joomla-download-manager.html","label":"security@joomla.org"}],"tags":["nvd","exploit-available"],"ingestedAt":"2026-07-11T23:16:20.966Z","epss":0.02328,"epssPercentile":0.82779,"exploits":{"github":4,"githubRepos":["https://github.com/shinthink/CVE-2026-57827","https://github.com/Mohammad-008/rsfiles-CVE-2026-57827","https://github.com/jjkk123123/CVE-2026-57827"],"nuclei":["CVE-2026-57827"],"checkedAt":"2026-09-25T08:21:04.552Z"},"exploitAvailable":true,"slug":"CVE-2026-57827","body":"## Overview\n\nThe Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":15,"depthScoreParts":{"impact":2.8,"likelihood":0.5,"exploitation":12,"ransomware":0},"changes":[{"seq":5372,"id":"CVE-2026-57827","ts":1788887273049,"field":"exploit_available","old":"false","new":"true"},{"seq":4255,"id":"CVE-2026-57827","ts":1788886387960,"field":"exploit_available","old":"true","new":"false"},{"seq":3005,"id":"CVE-2026-57827","ts":1788883051218,"field":"exploit_available","old":"false","new":"true"},{"seq":2034,"id":"CVE-2026-57827","ts":1788882455884,"field":"exploit_available","old":"true","new":"false"},{"seq":1108,"id":"CVE-2026-57827","ts":1788881893047,"field":"exploit_available","old":"false","new":"true"}]}