CVE Catalog
CVE-2026-61425
CriticalCVSS 9.4Exploitation Probability (EPSS)
Low risk0.25%
17th percentile - higher than 17% of all known CVEs
Summary
The Joomla extension Gridbox versions below 1.6.0 contains an authentication bypass vulnerability. An attacker can gain full administrative access without providing valid credentials.
Risk Assessment
Authentication bypass gives an attacker unrestricted control over the Joomla site, including the ability to modify content, install plugins, and access the database.
Recommendation
Update the Gridbox extension to version 1.6.0 or later. Review authentication and permission configurations.
Original NVD description (English source)
Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access.