CVE Catalog
CVE-2026-62414
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.23%
14th percentile - higher than 14% of all known CVEs
Summary
The Joomla extension Page Builder CK below version 3.6.2 does not properly apply access control to frontend page list views. An authenticated user can gain unauthorized access to page lists.
Risk Assessment
Risk includes disclosure of non-public pages or content that should be restricted to authorized users, potentially compromising data confidentiality.
Recommendation
Update the Page Builder CK extension to version 3.6.2 or later, which includes the access control fix.
Original NVD description (English source)
Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK does not properly apply access control to frontend page list views.