A vulnerability has been found in joomlacontenteditor Content Editor Extension up to 2.9.99.4 on Joomla and classified as critical . Affected by this issue is some unknown functionality of the component JCE Editor Extension . This manipulation causes improper access controls. This vulnerability is registered as CVE-2026-48907 . Remote exploitation of the attack is possible. No exploit is available.