CVE Catalog
CVE-2026-65886
CriticalCVSS 9.2Exploitation Probability (EPSS)
Low risk0.36%
29th percentile - higher than 29% of all known CVEs
Summary
Joomla Extension Gridbox below version 2.20.2 has a vulnerability allowing an unauthenticated attacker to read arbitrary files via the photo viewer.
Risk Assessment
An attacker can access sensitive files, such as configurations or user data, without authentication.
Recommendation
Update Gridbox to version 2.20.2 or later.
Original NVD description (English source)
Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo viewer allows unauthenticated attackers to view arbitrary files.