VULNERABILITY INTELLIGENCE
CVE-2026-74803
EPSS probability0.43%
CISA KEVNot currently listed
Published2026-08-19
Last modified2026-08-26
Description
Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 - The image element accepts arbitrary files when the client-supplied Content-Type falls within the image MIME group.
Weakness classification
- security@joomla.org: CWE-434