CVE-2026-67283
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
The Joomla extension tabaoca.org - Cotton Cloud before 2.0.2 has improper ACL implementation, allowing unauthenticated users to perform file operations (read, delete, overwrite, re-assign permissions) on every file managed within the extension.
Risk Assessment
Unauthorized users can access and modify files, potentially leading to data confidentiality and integrity breaches.
Recommendation
Update the Cotton Cloud extension to version 2.0.2 or later and check for unauthorized file operations.
Original NVD description (English source)
Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2 - Unauthenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissions) on every file managed within the extension.