Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 29

Export CSV
CVE-2026-65886

Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo viewer allows unauthenticated attackers to view arbitrary files.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Balbooa Balbooa.com
Products
Gridbox Gridbox Extension For Joomla
CVE-2026-65889

Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < 2.20.2 - The generateNewApp method allows actors to recursively delete directories.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Balbooa Balbooa.com
Products
Gridbox Gridbox Extension For Joomla
CVE-2026-65890

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Balbooa Balbooa.com
Products
Gridbox Gridbox Extension For Joomla
CVE-2026-65885

Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to upload arbitrary files. Turns into an authenticated RCE if combined with CVE-2026-65884 as the required account can be created by the attacker.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Balbooa Balbooa.com
Products
Gridbox Gridbox Extension For Joomla
CVE-2026-65884

Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Balbooa Balbooa.com
Products
Gridbox Gridbox Extension For Joomla
CVE-2026-61425

Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0

Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Balbooa.com
Products
Gridbox Extension For Joomla
CVE-2026-56291

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

CVSS 4.0 · 10 Critical EPSS 14.9% KEV · Listed
Vendors
Balbooa Balbooa.com
Products
Forms Balbooa.com Balbooa Forms Extension For Joomla