Unrated severityNVD Advisory· Published Jul 29, 2026· Updated Jul 30, 2026
Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2
CVE-2026-65885
Description
Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to upload arbitrary files. Turns into an authenticated RCE if combined with CVE-2026-65884 as the required account can be created by the attacker.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2- mysites.guru/blog/gridbox-23-critical-vulnerabilities/mitrethird-party-advisory
- www.balbooa.com/gridboxmitreproduct
News mentions
0No linked articles in our index yet.