CVE-2026-62414

CVE-2026-62414: Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2

Vendor Joomlack.fr

Product Page Builder CK extension for Joomla

Weakness CWE-284

Published July 20, 2026

Last update July 23, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK does not properly apply access control to frontend page list views.

Key dates

02Disclosure timeline

July 20, 2026 CVE published

July 23, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-62414 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html AskarLabs — CWE-284 write-up Improper Access Control

Related vulnerabilities

04Related CVE

CVE-2026-66494 Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0 CVE-2026-63047 Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 CVE-2026-64794 Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions CVE-2026-48904 Joomla! Core - [20260514] - Privilege escalation through com_users webservice endpoints CVE-2026-64796 Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension