What is CVE-2026-76570?

CVE-2026-76570 is a vulnerability in Joomcode.com Jctables Extension For Joomla, classified under SQL Injection. Published 2026-09-30.

Is CVE-2026-76570 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Joomcode.com Jctables Extension For Joomla

CVE-2026-76570

Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, column names, and values are taken directly from request parameters and concatenated into SQL queries, allowing SQLi for reading and writing queries.

Vulnerability class: SQL Injection

Published 2026-09-30 · last modified 2026-09-30.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

Joomcode.com Jctables Extension For Joomla — versions 1.0.0-1.20.0

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

murrez/CVE-2026-76570

References

www.joomcode.com/ (product)
www.vulncheck.com/blog/jctables-unauthenticated-sql-rw-to-rce (third-party-advisory)

Frequently asked questions

What is CVE-2026-76570?: CVE-2026-76570 is a vulnerability in Joomcode.com Jctables Extension For Joomla, classified under SQL Injection. Published 2026-09-30.
Is CVE-2026-76570 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.