CVE-2026-67286

The SP Page Builder versions prior to 6.8.0 are vulnerable to unauthenticated arbitrary directory creation and file writing, allowing attackers to create directories and files with predefined names on the server. This could lead to unauthorized access or manipulation of sensitive data. Joomla administrators and developers using affected versions should prioritize patching to mitigate potential exploitation risks.