Access Control Issue in Joomla Extension Page Builder CK from Joomla
CVE-2026-62414

9.1CRITICAL

Key Information:

Vendor: Joomlack.fr
Status: Page Builder Ck Extension For Joomla
Vendor: CVE Published:; 20 July 2026

🔔 Create Joomlack.fr Vulnerability Alert

What is CVE-2026-62414?

The Joomla extension Page Builder CK has a significant security flaw in which it fails to enforce proper access controls for frontend page list views. This vulnerability allows unauthorized users to view or interact with content they should not have access to, potentially leading to data exposure and manipulation. It is crucial for website administrators using this extension to apply necessary updates and strict access controls to mitigate the risks associated with this vulnerability.

Affected Version(s)

Page Builder CK extension for Joomla 1.0.0-3.6.1

References

https://www.joomlack.fr/

product

CVSS V3.1

Score:

9.1

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 20, 2026
Vulnerability Reserved
Jul 14, 2026

Credit

Krzysztof Zając, CERT PL

CVE-2026-62414 Data

JSON