CVE-2026-77991

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution.

  • Published Aug 27, 2026
  • CVSS 9.4 critical
  • 0.6% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-77991 at the National Vulnerability Database