CVE-2026-65891

{
  "id": "CVE-2026-65891",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-29T13:19:10.980",
  "lastModified": "2026-10-23T23:10:00.157",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced."
    },
    {
      "lang": "es",
      "value": "Extensión de Joomla - joomlacontenteditor.net - Creación de archivos ocultos y sobrescritura de archivos no intencionada a través de la función de renombrar en Joomla Content Editor (JCE) < 2.20.2 - La validación de entrada incorrecta en la funcionalidad de renombrar archivos permitió a un usuario autenticado con permisos de gestión de archivos renombrar archivos con nombres que de otro modo serían inválidos, lo que resultó en la creación de archivos ocultos. El problema también permitió que los archivos existentes en la ruta de destino fueran reemplazados de forma no intencionada."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "joomlacontenteditor.net",
          "product": "Joomla Content Editor (JCE) extension for Joomla",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.0.0-2.9.99.9",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-30T13:34:28.287307Z",
          "id": "CVE-2026-65891",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:widgetfactorylimited:jce:*:*:*:*:core:joomla\\!:*:*",
              "versionEndExcluding": "2.20.2",
              "matchCriteriaId": "1B8BE577-9064-4B55-87CA-F4527791CE1A"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:widgetfactorylimited:jce:*:*:*:*:pro:joomla\\!:*:*",
              "versionEndExcluding": "2.20.2",
              "matchCriteriaId": "7B0A0F8F-3E65-4CD3-8B0D-E370CC3C7B33"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.joomlacontenteditor.net/",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    }
  ]
}