CVE-2026-65888: falha crítica em balbooa.com Gridbox extension for Joomla
Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 10epss 0.5%
Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method allows actors to login as any given user on the target site.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red
Produtos afetados
balbooa.com · Gridbox extension for JoomlaCVEs relacionadas — balbooa.com Gridbox extension for Joomla
No mesmo produto, das mais perigosas para as menos.
CVE-2026-61425CRITICALJoomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0EPSS 0.6%CVE-2026-65886CRITICALJoomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2EPSS 0.6%CVE-2026-65885CRITICALJoomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2EPSS 0.5%CVE-2026-65887CRITICALJoomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2EPSS 0.5%CVE-2026-65884CRITICALJoomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2EPSS 0.5%CVE-2026-65890CRITICALJoomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2EPSS 0.5%