Auth bypass in Joomshaper.com Helix Ultimate Extension For Joomla

CVE-2026-57830

The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion.

Vulnerability class: Broken Access Control

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2026-57830?
CVE-2026-57830 is a vulnerability in Joomshaper.com Helix Ultimate Extension For Joomla, classified under Missing Authorization. Published 2026-07-13.
Is CVE-2026-57830 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.