Vulnerabilities
CISA Adds Joomla JCE Flaw CVE-2026-48907 to KEV Catalog
CISA's KEV addition is the defender's signal to verify Joomla JCE patches across managed deployments, confirming every Content Editor install is on the fixed 2.9.99.5 build before automated scanning reaches it.