Unrated severityNVD Advisory· Published Jul 29, 2026· Updated Aug 1, 2026
Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2
CVE-2026-65887
Description
Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassword method allows actors to reset any user password, allowing to login and act as these users - excluding super admins.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2- mysites.guru/blog/gridbox-23-critical-vulnerabilities/mitrethird-party-advisory
- www.balbooa.com/gridboxmitreproduct
News mentions
0No linked articles in our index yet.