Description
Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rsjoomla.com | rsjoomla.com RSFiles extension for Joomla | 1.0-1.17.11 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 4 repositories
-
shinthink/CVE-2026-57827 ★ 16 · Jul 29, 2026
CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12
-
Mohammad-008/rsfiles-CVE-2026-57827 ★ 9 · Aug 2, 2026
Unauthenticated File Upload → RCE PoC for CVE-2026-57827 (RSFiles! Joomla < 1.17.12). Authorized security research use only.
-
jjkk123123/CVE-2026-57827 ★ 1 · Aug 6, 2026
Joomla RSFiles 未授权文件上传CVE-2026-57827检测&利用脚本
-
Candisexterior171/CVE-2026-57827 ★ 0 · Jul 30, 2026
Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- RSFiles! for Joomla - Arbitrary File Upload http/cves/2026/CVE-2026-57827.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.