CVE-2026-62414

CVE-2026-62414: Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2

Vendor Joomlack.fr

Product Page Builder CK extension for Joomla

Weakness CWE-284

Published July 20, 2026

Last update July 23, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK does not properly apply access control to frontend page list views.

Key dates

02Disclosure timeline

July 20, 2026 CVE published

July 23, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-62414 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html AskarLabs — CWE-284 write-up Improper Access Control

Related vulnerabilities

04Related CVE

CVE-2025-25225 Extension - hikashop.com - Privilege escalation vulnerability Hikashop component version 1.0.0 - 5.1.3 for Joomla CVE-2026-49049 Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler CVE-2026-64796 Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension CVE-2026-48904 Joomla! Core - [20260514] - Privilege escalation through com_users webservice endpoints CVE-2026-21629 Joomla! Core - [20260301] - ACL hardening in com_ajax