← Back to browse · API

CVE-2026-65884

Severity
CRITICAL
CVSS
9.8
Published
2026-07-29
Modified
2026-08-05
First seen
2026-08-05
Aliases
-
Products
balbooa:gridbox
Sources
nvd CVE-2026-65884

Description

Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions.

References