CVE-2026-65943
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Joomla extension RO CSVI (rolandd.com) before version 9.11.0 allows unauthenticated attackers to create directories on the server.
Risk Assessment
Unauthorized directory creation can lead to malicious file uploads, privilege escalation, or website defacement.
Recommendation
Upgrade RO CSVI extension to version 9.11.0 or later.
Other vulnerabilities in RO CSVI
See all- CVE-2026-65946Medium
Joomla Extension - rolandd.com - contains XSS vectors in AJAX endpoint handlers in RO CSVI before version 9.11.0.
- CVE-2026-65944High
CSRF vulnerability in the Joomla extension RO CSVI versions prior to 9.11.0. CSRF vectors exist in AJAX endpoint handlers, potentially allowing an attacker to perform unauthorized actions in the context of an administrator's session.
Original NVD description (English source)
Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.0