CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-65883 — Critical vulnerability brief

July 29, 2026CVSS 10

Joomla Extension – aimy-extensions.com – RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 – 20.0 – A forged clfgd field allows PHP objection injection and thereby remote code execution.

CVSS base score: 10 / 10

View NVD record