Cotton Cloud Extension For Joomla CVEs and Security Vulnerabilities

CVE-2026-67283

Joomla Extension - tabaoca.org - Improper ACL implementation allows allow file operations in Cotton Cloud < 2.0.2

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2 - Unauthenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissions) on every file managed within the extension.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Tabaoca.org

Products

Cotton Cloud Extension For Joomla

CVE-2026-67284

Joomla Extension - tabaoca.org - Improper ACL checks allow file operations in Cotton Cloud < 2.0.2

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.3 - Authenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissions) on files owned by other users.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed