CVE-2026-77991: Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1

Q: Who needs to be able to exploit this issue?

Exploitation is described as privileged, so an attacker would need administrator-level access to the Joomla Event Manager component.

Q: Which deployments are affected?

Joomla Event Manager versions earlier than 5.0.1 are affected. The issue is in the administrator source model, so exposure depends on access to the component's administrator functionality.

Q: What is the impact of successful exploitation?

An attacker can write dangerous file types, including PHP files, through the affected source model. This can lead to remote code execution.

Published Aug 27, 2026

Updated

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution.

Affected Software

1 affected component

joomlaeventmanager.net<5.0.1

Event History

Aug 27, 2026

CVE Published

via MITRE·05:50 AM

Data Sourced

via MITRE·05:50 AM

DescriptionWeakness

Data Sourced

via NVD·06:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who needs to be able to exploit this issue?

Exploitation is described as privileged, so an attacker would need administrator-level access to the Joomla Event Manager component.

Which deployments are affected?

Joomla Event Manager versions earlier than 5.0.1 are affected. The issue is in the administrator source model, so exposure depends on access to the component's administrator functionality.

What is the impact of successful exploitation?