CVE-2026-66914

CriticalCVSS 9.2

Published: 07/08/2026(UTC)Updated: 07/08/2026(UTC)Translated: 07/08/2026(UTC)NVD NIST

Summary

Joomla extension SEBLOD versions < 3.30.0, < 4.7.0, < 6.0.1 have an unauthenticated path traversal vulnerability allowing file download from inside and outside the webroot.

Risk Assessment

An attacker can download sensitive files, such as configuration files or user data, potentially leading to security compromise.

Recommendation

Upgrade SEBLOD to version 3.30.0, 4.7.0, or 6.0.1 or later.

Original NVD description (English source)

Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated attacker could download files from both inside and outside the webroot.