CVE-2026-67284CWE-284broken-access-control

CVE-2026-67284

published August 12, 2026

CVSS

5.3

EPSS

Percentile

27.5

In the wild

Unconfirmed

What it is

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.3 - Authenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissions) on files owned by other users.

The record

Technical detail

CVSS: 5.3 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00351 · 27.5th percentile
Weakness: CWE-284 · Improper Access Control
Published: 2026-08-12T14:17Z

References (1)

https://www.tabaoca.org/ · [email protected]

EPSS history

Timeline

12 AUG 09:58Z
Joomla Extension - tabaoca.org - Improper ACL checks allow file operations in Cotton Cloud < 2.0.2
cvelistv5