CVE-2026-67285

The SP Page Builder extension for Joomla versions prior to 6.8.0 is vulnerable to unauthenticated arbitrary local PHP file inclusion, allowing attackers to include and execute arbitrary PHP files on the server. This critical vulnerability could lead to complete system compromise, making it essential for all Joomla administrators using affected versions to prioritize immediate updates to mitigate potential exploitation.