High severityNVD Advisory· Published Nov 12, 2026

CVE-2026-117544

Description

Joomla Extension - jdownloads.com - IDOR allowing restricted file downloads in jDownloads < 4.1.8 - The other_file_id parameter could reference another download’s file without fully enforcing the target download’s access restrictions. This allowed files to be delivered to users who were not authorised to access the target download.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

JDownloads/Jdownloadsllm-fuzzy
Range: <4.1.8

Patches

Vulnerability mechanics

References

www.jdownloads.comnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000