---
title: "Security digest: June 27, 2026"
url: https://erroneo.us/security/2026-06-27/
description: "June 27, 2026 vulnerability digest: 1 brief (Page Builder CK CVE-2026-56290: Exploited Joomla…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2026-06-27
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: June 27, 2026

1 editorial brief.

## Take stock

- Check exposure: Page Builder CK CVE-2026-56290: Exploited Joomla Upload RCE . Anyone who runs or maintains Joomla sites with Joomlack's Page Builder CK (com_pagebuilderck), Light or Pro, including agencies looking after many client sites.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [Page Builder CK CVE-2026-56290: Exploited Joomla Upload RCE](https://erroneo.us/security/briefs/joomlack-page-builder-ck-cve-2026-56290-file-upload-rce/index.md): Only Joomla sites running Page Builder CK are at risk, but for them this is an emergency: an unauthenticated web-shell upload exploited within hours of the patch, with an incomplete first fix, so update to 3.6.5 or later and hunt for shells.

## Known exploited (CISA KEV)

None.

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2026-06-27/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt