CVE-2026-66916
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is protected with a password, the HTML view correctly enforces the password gate - but the JSON view ( format=json ) skips this check entirely.
Risk Assessment
The risk includes unauthorized access to protected gallery content, potentially leading to disclosure of sensitive data.
Recommendation
Update JoomGallery to version 4.4.0 or later and enforce access controls for the JSON view as well.
Other vulnerabilities in JoomGallery
Original NVD description (English source)
Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is protected with a password, the HTML view correctly enforces the password gate - but the JSON view ( format=json ) skips this check entirely.