CVE-2026-73327

CVE-2026-73327

published August 12, 2026

CVSS
8.7
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as the reported behavior is intentional. The update process is designed to write files to disk and is restricted to the highest-privilege users working with cryptographically verified Joomla archives.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
Not supplied
EPSS
0.00853 · 55.3th percentile
Published
2026-08-12T22:18Z
EPSS history
Timeline
  • 12 AUG 18:05Z
    Joomla 6.1.1 Zip Slip Path Traversal via com_joomlaupdate extract.php
    cvelistv5