CVE Catalog
CVE-2026-65889
CriticalCVSS 9.2Exploitation Probability (EPSS)
Low risk0.32%
25th percentile - higher than 25% of all known CVEs
Summary
Joomla Extension Gridbox below version 2.20.2 has a vulnerability allowing an unauthenticated attacker to recursively delete directories via the generateNewApp method.
Risk Assessment
An attacker can delete critical system directories, causing application downtime or data loss.
Recommendation
Update Gridbox to version 2.20.2 or later.
Original NVD description (English source)
Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < 2.20.2 - The generateNewApp method allows actors to recursively delete directories.