CVE-2026-66914CWE-22path-traversal

CVE-2026-66914

published August 7, 2026

CVSS
9.2
EPSS
1%
Percentile
43.2
In the wild
Unconfirmed
What it is

Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated attacker could download files from both inside and outside the webroot.

The record
Technical detail
CVSS
9.2 · NONE
CVSS v4.0
Not supplied
EPSS
0.00518 · 43.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-07T18:17Z
References (1)
https://www.seblod.com/ · [email protected]
EPSS history
Timeline
  • 07 AUG 13:15Z
    Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1
    cvelistv5