CVE-2026-107129highCWE-22

CVE-2026-107129: falha de alta gravidade em balbooa.com Gridbox extension for Joomla

Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Gridbox extension for Joomla

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.3epss 0.4%
Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L
Produtos afetados
balbooa.com · Gridbox extension for Joomla
CVEs relacionadas — balbooa.com Gridbox extension for Joomla

No mesmo produto, das mais perigosas para as menos.

CVE-2026-61425CRITICALJoomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0EPSS 0.6%CVE-2026-65886CRITICALJoomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2EPSS 0.6%CVE-2026-65885CRITICALJoomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2EPSS 0.5%CVE-2026-65888CRITICALJoomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2EPSS 0.5%CVE-2026-65887CRITICALJoomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2EPSS 0.5%CVE-2026-65884CRITICALJoomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2EPSS 0.5%