CVE Catalog
CVE-2026-65884
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk0.25%
16th percentile - higher than 16% of all known CVEs
Summary
Joomla Extension Gridbox below version 2.20.2 has a privilege escalation vulnerability. The registration method allows users to provide usergroup IDs, enabling an unauthenticated attacker to register an account with administrative permissions.
Risk Assessment
An attacker can create an admin account without authentication, gaining full control over the system.
Recommendation
Update Gridbox to version 2.20.2 or later.
Original NVD description (English source)
Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions.