← Back to browse · API

CVE-2026-61900

Severity
CRITICAL
CVSS
10.0
EPSS
0.00263
Risk score
40.09
CISA KEV
No
PoC
No
Published
2026-07-20
Modified
2026-07-23
First seen
2026-08-05
Aliases
EUVD-2026-46085, GHSA-65X2-CG74-8X2M
Products
dj-extensions.com:jDownloads extension for Joomla 4.1.0-4.1.5
Sources
nvd CVE-2026-61900
euvd EUVD-2026-46085

Description

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE.

References