← CVE Intelligence

CVE-2026-21628

Extension - astroidframe.work - Unauthenticated Remote Code Execution in Astroid Framework 2.0.0 - 3.3.10 for Joomla PUBLISHED

Description (CNA)

A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution.

Affected (CNA)

Vendor / productVersions
astroidframe.work / Astroid Template Frameworkaffected 2.0.0-3.3.10

CWE

CWE-434

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.