astroidframe.work vulnerabilities

Products

• Astroid Template Framework 1

Latest astroidframe.work CVEs

Newest publication first

1. CVE-2026-21628 Extension - astroidframe.work - Unauthenticated Remote Code Execution in Astroid Framework 2.0.0 - 3.3.10 for Joomla

   Published 2026-03-05

   Critical·CVSS 10.0 EPSS 0.54%

   A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.