CVE-2026-88856
— UNSCOREDPublished 2026-09-20 · Updated 2026-09-21
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions updateOSGallery(), reached via task=update_osgallery, read a JSON request body and called the value of a method field as a live PHP function, passing the value of a package field as its single argument, with no allow-list or is_callable() check of any kind. Any function name compatible with a single argument was directly reachable, including system, exec, shell_exec, and passthru.
Weaknesses
CWE-94
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-16623
- HIGHCVE-2026-18770
- HIGHCVE-2026-4327
- HIGHCVE-2026-46581PoC
- UNSCOREDCVE-2026-47781PoC
- HIGHCVE-2026-51401PoC
- HIGHCVE-2026-55071PoC
- UNSCOREDCVE-2026-58074
Related by shared AI tags and CWE weakness class. Browse the full archive.