CVE-2026-105603

Published 2 November 2026 · tracked since 3 November 2026

Description

Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unprivileged file upload, leading to full RCE.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-121443 MEDIUM 5.3
• CVE-2026-121444 HIGH 7.5
• CVE-2026-121435 MEDIUM 4.3
• CVE-2026-121436 HIGH 7.2
• CVE-2026-121417 HIGH 7.8
• CVE-2026-121392 HIGH 7.4
• CVE-2026-118527 MEDIUM 4.3
• CVE-2026-106991 HIGH 7.1
• CVE-2026-119742 HIGH 7.2
• CVE-2026-119179 HIGH 7

→ Open the live CVE board · all tools