VULNERABILITY INTELLIGENCE

CVE-2026-66492

CVSS score6.1 MEDIUM
EPSS probability0.56%
CISA KEVNot currently listed
Published2026-08-07
Last modified2026-10-24
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N

Description

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerability.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references