CVE Catalog
CVE-2026-57830
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.24%
16th percentile - higher than 16% of all known CVEs
Summary
The Joomla extension Helix Ultimate below version 2.2.7 is vulnerable to unauthenticated arbitrary file deletion. An attacker without logging in can delete any file on the server.
Risk Assessment
Risk includes complete data loss, site damage, or potential remote code execution by deleting critical system files.
Recommendation
Immediately update the Helix Ultimate extension to version 2.2.7 or later.
Original NVD description (English source)
Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion.