CVE Catalog
CVE-2026-65431
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.16%
5th percentile - higher than 5% of all known CVEs
Summary
The GeoIP extension for Joomla! extracts database update archives without path validation, leading to a Zipslip vulnerability.
Risk Assessment
An attacker can overwrite arbitrary files on the server, potentially leading to site compromise.
Recommendation
Update the GeoIP extension and implement path validation during archive extraction.
Original NVD description (English source)
Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions.