VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Sep 26, 2026· Updated Oct 20, 2026

CVE-2026-97163

CVE-2026-97163

Description

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

Affected products

2
  • Lomart/Up
    cpe:2.3:a:lomart:up:*:*:*:*:*:joomla\!:*:*
    Range: >=5.0.0,<=5.2.0
  • Lomart.fr/UP pluginllm-fuzzy
    Range: 5.0.0-5.2.0, 6.0.0-6.0.29

Patches

Vulnerability mechanics

References

1

News mentions

2