BaselineWatch
60795 CVEs · 136 in KEV
Desk
CVEs known60,795 New, 24 h1,842 Changed, 24 h2,046 In KEV136 Public exploit1,620 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVEs
CVECVSSEPSSVendor, productDescriptionModified
CVE-2026-48908KEVexploit ×12 10.0 critical 89.0% ollyo, sp_page_builder A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code. Sun 25 Oct
CVE-2026-56290KEVexploit ×6 10.0 critical 31.0% joomlack, page_builder_ck Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE. Sun 25 Oct

2 of 2

Download these 2 as CSV · subscribe to this list.

EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.