CVE-2026-66489

概要

参考情報

• mysites.guru/blog/gridbox-23-critical-vulnerabilities · Third Party Advisory
• balbooa.com/gridbox · Product

gridbox のその他の脆弱性

• CVE-2026-65947高 7.3Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
• CVE-2026-65888緊急 9.8Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method allows actors to login as any g…
• CVE-2026-65887緊急 9.8Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassword method allows actors to re…
• CVE-2026-65886高 7.5Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo viewer allows unauthenticated attackers…
• CVE-2026-66490中 6.1Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2