CVE-2026-105603

waiting for further signals

EUVD-2026-115358 ↗

no check availablenot proven exploitable

cve.orgpublic pockev

dj-extensions.com DJ-Classifieds extension for Joomla 1.0-3.11.2

CWE-434 Unrestricted Upload of File with Dangerous Type

ETK-2026-3304, permanent identifier

cvss9.4cna vendorCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

3h 37msince last run

46mAI analysis

timeline

0 = trigger signal

trigger signal (cve.org) +0hwaiting for further signals+1h04m

+2h

+4h

+6h

+8h

+10h

+12h

description

DJ-Classifieds for Joomla versions earlier than 3.11.3 are affected by an arbitrary file upload flaw. An authenticated unprivileged user may be able to upload files and obtain remote code execution; valid low-privilege access is required.

mitigation

Upgrade DJ-Classifieds to version 3.11.3 or later. Until upgraded, restrict unprivileged Joomla accounts and limit access to the extension's upload functionality.

check

exploit

automation

contextual

auth required

yes, low privileges

EPSS

–

agent run time

46m

cve.org record, t = 0

2026-11-02 18:25Z

Δ to public poc

–

Δ to kev

–

outcome

Contextual, not validated: no deterministic check could cover this one, and no technique passed our review.

source signals

Public signals that triggered or updated the pipeline. These are inputs for the deltas above.

2026-11-02 18:25Z
cve_org: trigger signal, started the run
https://www.cve.org/CVERecord?id=CVE-2026-105603

this entry in the feed

GET /api/v1/feed/CVE-2026-105603

{
  "etk_id": "ETK-2026-3304",
  "cve_id": "CVE-2026-105603",
  "display_id": "CVE-2026-105603",
  "ghsa_id": null,
  "euvd_id": "EUVD-2026-115358",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Authenticated arbitrary file upload in DJ-Classifieds",
  "summary": "DJ-Classifieds for Joomla versions earlier than 3.11.3 are affected by an arbitrary file upload flaw. An authenticated unprivileged user may be able to upload files and obtain remote code execution; valid low-privilege access is required.",
  "mitigation": "Upgrade DJ-Classifieds to version 3.11.3 or later. Until upgraded, restrict unprivileged Joomla accounts and limit access to the extension's upload functionality.",
  "vendor": "dj-extensions.com",
  "product": "DJ-Classifieds extension for Joomla",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "1.0-3.11.2"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "DJ-Classifieds extension for Joomla",
      "purl": null
    }
  ],
  "cwes": [
    434
  ],
  "cvss_score": 9.4,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 45.87577911666666,
  "t0_at": "2026-11-02T18:25:29.193000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-02T18:25:29.193000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-02T18:25:29.193000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105603"
    }
  }
}

published 2026-11-02 18:43Z
last change 2026-11-02 20:38Z

Need the technical details behind an entry?

Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.