1
CVEs
1
Critical
0
High
0
KEV
0
PoC
1
Unpatched C/H
0.0%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
1
HIGH
0
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (2)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-74254 | SQL injection in Page Builder CK for Joomla (versions before 3.6.5) lets attackers manipulate database queries through the extension's styles model, exposing the underlying database to unauthorized read and write. The flaw is exploitable remotely without authentication per the CVSS 4.0 vector (AV:N/PR:N/UI:N), with the frontend attack surface closed in 3.6.4 and the backend surface closed in 3.6.5. No public exploit identified at time of analysis, but the CWE-89 root cause and the reported 9.3 severity make this a high-priority patch for affected Joomla sites. | CRITICAL | 9.3 | 0.3% | 47 |
No patch
|