CVE-2026-67283CWE-284broken-access-control

CVE-2026-67283

published August 12, 2026

CVSS

6.9

EPSS

Percentile

35.1

In the wild

Unconfirmed

What it is

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2 - Unauthenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissions) on every file managed within the extension.

The record

Technical detail

CVSS: 6.9 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00419 · 35.1th percentile
Weakness: CWE-284 · Improper Access Control
Published: 2026-08-12T13:17Z

References (1)

https://www.tabaoca.org/ · [email protected]

EPSS history

Timeline

12 AUG 09:06Z
Joomla Extension - tabaoca.org - Improper ACL implementation allows allow file operations in Cotton Cloud < 2.0.2
cvelistv5